4 ms·
You have to keep in mind ipfs is content-addressed. Instead of resolving names you can resolve certificates by their content addressed thumbprint. 1) boostrap
by badrabbit 7y ago
You have to keep in mind ipfs is content-addressed. Instead of resolving names you can resolve certificates by their content addressed thumbprint.
1) boostrap
2) find the cert thumbprint for site.com
3) find the cert by the thumbprint and connect to one if IP SAN records
- zaarn 7y agoHow do you securely get the cert thumbprint?
- badrabbit 7y agoYou don't need to,even if you get a malicious thumbprint,the associated cert still needs to be signed by a trusted CA. CA list for TLDs will be distributed with the resolver software just like browsers ship with such a list (or rely on your browser/client preferred list)