5 ms·

Tomorrow's Icelandic govt. could be anybody

• dane-pgp 10y ago
  In fact, next month's Icelandic government could be the Pirate Party, but I would rather trust Iceland not to elect an anti-privacy government than trust all CAs in the world not to be subverted by any anti-privacy government (indeed, some of them already have been).
  • tptacek 10y ago
    Fortunately, trusting all the existing CAs is literally nobody's argument, so we can stop spending time litigating that.
    • dane-pgp 10y ago
      "Trusting all the existing CAs" is literally the status quo, though, right? So whatever it is you are proposing as a replacement needs to be strictly better than that. I've made my case for how DANE is better, but what exactly are you proposing as an alternative? Is it just "trusting all the existing CAs, and distrusting them a few months after they have been caught (using CT) breaking the rules"? You earlier argued that the strength of the CA system is that they "can be --- and have been --- and will probably within a few weeks be again --- untrusted by browsers", but that just sounds like you're saying "the good thing about the CA system is that it keeps failing, and our repeated belated steps to punish malfeasance do not work as a deterrent". Again, I look forward to reading what you propose instead of the CA system and DANE.