2 ms·
What does https do that's different from verifying the cert chain and matching the cn to the hostname? Is this about the ill-conceived cert-pinning that pretend
by e12e 9y ago
What does https do that's different from verifying the cert chain and matching the cn to the hostname? Is this about the ill-conceived cert-pinning that pretends distributing keys for every domain is a scalable alternative to certificate authorities and on-line revocation lists?
- noblethrasher 9y agoAn MTA-STS web server is also used for policy discovery, and the HTTPS requirement ensures that the policy is authentic.