3 ms·

Hopefully one day we will replace CAs with something decentralized(i.e based on DNSSEC). CAs make sense only if you need an EV certificate.

• Panino 10y ago
  DNSSEC is not decentralized -- it follows a strict hierarchy from ICANN => TLDs (world governments) => you. DNS is distributed, not decentralized.
  • themihai 10y ago
    Right... but at least you cut off the CA from the scheme. You depend on ICANN -> TLD anyway.