4 ms·
Marlinspike abandoned convergence a year after it was debuted. It's currently broken on most (all?) platforms. As covered in the article, Convergence-style tr
by indolering 11y ago
Marlinspike abandoned convergence a year after it was debuted. It's currently broken on most (all?) platforms.
As covered in the article, Convergence-style triangulation of cryptographic information is application/protocol neutral. Indeed, a DNS-level implementation would be much more powerful than what can be accomplished with HTTPS.
- tptacek 11y agoHe moved from Convergence to TACK, which is on hold during the rollout of HPKP, which is like 80% of the value proposition of TACK.
- cpach 11y agoWhat’s in the missing 20%?
- indolering 11y agoIt's still vulnerable to MITM attacks on the first connection.
- cpach 11y agoAh. What is TACK’s proposal to prevent that from happening?