4 ms·
That’s how, for example, TLS works too. I don’t understand what you mean when you say that app-level security doesn’t mean much if your first network step is c
by mikeash 8y ago
That’s how, for example, TLS works too.
I don’t understand what you mean when you say that app-level security doesn’t mean much if your first network step is compromised. TLS will protect you there, as will any other decently implemented end-to-end encrypted protocol.
- ethbro 8y agoTLS has the benefit of a world-wide PKI built around it to attest to authentication. I was trying to note the risks to PKI-less / web of trust participants, and should have called that out explicitly. Mostly because I'd much rather live in an encrypted world where WoT is the dominant mode, vs corporate-controlled PKI. And the biggest risks there seems like the step no one can get around in ordinary use.