3 ms·
You really shouldn't do HTTPS if you can't complete the chain of trust with a peer. If one is doing some multi-cast multi-tenant swarm stuff... why is the data
by valarauca1 10y ago
You really shouldn't do HTTPS if you can't complete the chain of trust with a peer.
If one is doing some multi-cast multi-tenant swarm stuff... why is the data private? It seems like a lot of people have access.
- gilgoomesh 10y agoIn my case, your peers are your friends. You use a pairing code (part of the SHA256 fingerprint) to accept the certificate (so you need to see the other person's screen and have agreement with the fingerprint) and then you can use indefinitely. It's great until the whole connection fails because some element in the system works with Certificate Authority certs-only – issues we're still working on and certainly won't be finished by Jan 1.
- valarauca1 10y agoThe finger print is public. There is literally zero security in this system anyone can hijack it
- JamesB7 10y agoPublic keys are public. Just because you don't understand cryptography doesn't make a system bad. There's nothing magical about certificate authorities. There are many ways to establish secure connections without them.