4 ms·
Instead of 3rd party CA, wouldn't it be more secure if the browser will send a hash of website's public key to a few trusted websites and have them verified the
by tkinom 11y ago
Instead of 3rd party CA, wouldn't it be more secure if the browser will send a hash of website's public key to a few trusted websites and have them verified the public key is valid?
If someone needs to create a fake CA/public key, they have to hack multiple trusted sites.
It is not current https sys design, but would it be more secure?