3 ms·
Yeah,but now you're talking about browsers. You and others keep telling me how secure TLS and CA pki is,I never said otherwise. It's just not end to end. The su
by badrabbit 8y ago
Yeah,but now you're talking about browsers. You and others keep telling me how secure TLS and CA pki is,I never said otherwise. It's just not end to end. The subject here is dns over https and there certainly is no client auth here. TLS provides good transport security for the client. Not end to end,as in the CA infra for client auth isn't on par and even if it was CT is not TLS protocol feature and it's up to applications to verify CT,have only good root CAs and do client certs right