3 ms·
> 4. DNS (sort of a walled garden, yes) IMHO, Web Key Directory is a better option here. It has all benefits of DNS but none of the drawbacks (DNS has plain te
by Boulth 7y ago
> 4. DNS (sort of a walled garden, yes)
IMHO, Web Key Directory is a better option here. It has all benefits of DNS but none of the drawbacks (DNS has plain text queries etc.)
- megous 7y agoVery nice. Both DNS and WKD are real-time, and modifiable by an attacker. There's no trail of trust/history. It may be good for discovery, but trusting the key requires more. I guess that it's better to have multiple independent ways to validate ownership of a key after you discover it. Cross-check various methods that require different levels of access, to see if something is fishy. Anyway, I'm off to implement wkd. :)