4 ms·
How are you going to trust that decentralized org? Is it just voting? Can we all vote to revoke anyone's cert at any time for no reason? What happens when someo
by henryfjordan 7y ago
How are you going to trust that decentralized org? Is it just voting? Can we all vote to revoke anyone's cert at any time for no reason? What happens when someone performs a 51% attack and takes over google.com's cert?
CAs exist solely because you CAN trust them, otherwise what's the point? We'd just have every site self-sign and let the users choose who to trust.
- JohnFen 7y ago> CAs exist solely because you CAN trust them, otherwise what's the point? That's the idea, but in practice, I don't really trust the vast majority of them.
- dheera 7y agoMy thinking was that it would be similar to a GPG trust network.
- tatersolid 7y agoWe’ve seen nearly 30 years of web-of-trust failure and yet you still think it’s a workable idea?