4 ms·
That seems like a good idea -- a simple scheme where the browser validates every http response from a particular domain against a key specified in that domain's
by breatheoften 10y ago
That seems like a good idea -- a simple scheme where the browser validates every http response from a particular domain against a key specified in that domain's SSL cert (if the appropriate field is present in the https cert) -- seems like it would work well?
- anewhnaccount 10y agoThis is what MEGA does. See: https://github.com/meganz/webclient/blob/master/secureboot.js https://github.com/meganz/webclient/blob/master/secureboot.j...