3 ms·
Given the problems with CAs, TLS is falling back to TOFU (public key pinning). (At least with pinning you can trust a subset of CAs,not just leaf nodes. If I co
by angry_octet 11y ago
Given the problems with CAs, TLS is falling back to TOFU (public key pinning). (At least with pinning you can trust a subset of CAs,not just leaf nodes. If I could do that with SSH host keys it would be helpful.)