4 ms·
Lets hope that SSL certs will only be a temporary solution. Why can't we switch to a system that doesn't depend on central authority? In the meantime, it would
by buboard 7y ago
Lets hope that SSL certs will only be a temporary solution. Why can't we switch to a system that doesn't depend on central authority?
In the meantime, it would be nice for letsencrypt to pledge not to take big donations from corporates.
- zozbot234 7y agoYou can use self-signed SSL, it's essentially TOFU. Or install a local cert authority on your own machines.
- yrro 7y agoTis a shame web browsers are only able to use Kerberos to authenticate connections and not additionally to provide confidentiality and protect the integrity of the communications channel. Certificates are pain in the arse and it depresses me that we still don't have a way to deal with compromised private keys.
- Spivak 7y ago> pledge not to take big donations from corporates You mean the people who actually benefit financially from the service? Look, I get the sentiment but this is a case where the incentives are remarkably aligned. Companies that derive real business value from the service foot the bill while the rest of the world gets free certs.
- buboard 7y agooops i mean big corporates, like, major companies throwing millions at them