4 ms·
I like this idea of different signals for different levels of trust. In practice how would it be best implemented though? Some sort of entry in DNS that says "w
by stanleydrew 8y ago
I like this idea of different signals for different levels of trust. In practice how would it be best implemented though? Some sort of entry in DNS that says "we have all certs signed by one of these two CAs" and then clients could see if a cert is valid but chains up to a different root and show "this is secure, but not in the way you think"?
- 3pt14159 8y agoBasically, yeah. And maybe it should be country-smart too. An HTTPS cert originating from China and being used for a Chinese service is green, but as the internet balkanizes we may want to be a little smarter. Not sure on that though.