4 ms·
In my case, your peers are your friends. You use a pairing code (part of the SHA256 fingerprint) to accept the certificate (so you need to see the other person'
by gilgoomesh 10y ago
In my case, your peers are your friends. You use a pairing code (part of the SHA256 fingerprint) to accept the certificate (so you need to see the other person's screen and have agreement with the fingerprint) and then you can use indefinitely. It's great until the whole connection fails because some element in the system works with Certificate Authority certs-only – issues we're still working on and certainly won't be finished by Jan 1.
- valarauca1 10y agoThe finger print is public. There is literally zero security in this system anyone can hijack it
- JamesB7 10y agoPublic keys are public. Just because you don't understand cryptography doesn't make a system bad. There's nothing magical about certificate authorities. There are many ways to establish secure connections without them.