3 ms·
> it's a tree-structured PKI, just like the CA system, except that the top of the tree is run de jure by world governments. Which can be solved by having bit.l
by wav-part 10y ago
> it's a tree-structured PKI, just like the CA system, except that the top of the tree is run de jure by world governments.
Which can be solved by having bit.ly key validated by .ly key + Firefox key + LetsEncrypt key.
DNSSEC may have other architectural/mplementational faults but this property is not one of them. I believe this way of certification is the way forword for internet scale web of trust.
- tedunangst 10y agoThat doesn't sound like much of a migration.
- wav-part 10y agoYes except it wont be the website server returning chain of trust but nameserver.