3 ms·
Your computer can't simply remember the certificate that was used for the last connection, because then sites can never change their certificates (which would b
by eridius 10y ago
Your computer can't simply remember the certificate that was used for the last connection, because then sites can never change their certificates (which would be a huge issue).
- dijit 10y agoMoxie mentioned before that using notaries would work, of course you have to worry about notaries being compromised but that's a much easier threat model. https://en.wikipedia.org/wiki/Convergence_(SSL) https://en.wikipedia.org/wiki/Convergence_(SSL)
- wtbob 10y agoThey could, for example, sign the new cert with the old one.
- willstrafach 10y agoWhat if the certificate's private key is compromised? How would revocation work?