4 ms·

Does putting self-signed certs on a blockchain really solve the problem?

• vbezhenar 7y ago
  Everyone can put self-signed cert on a blockchain. You need to prove that you control the domain. Easiest way to prove that is to ask your registrar. And if your registrar will sign this fact you don't even need to ask him. So you naturally will come to DNS and DNSSec. And all standards are already here: deploy DNSSec, put TLSA record and it's done. It's a solved problem, just not widely supported.
  • uberdru 7y ago
    "prove that you control the domain"? isn't that the rub? sounds a bit circular to me at least. there doesn't seem to be any solid replacement for the existing centralized trust authorities. what am i missing?
    • vbezhenar 7y ago
      As long as we're talking about conventional DNS, it's centralized by design. And if you want to build a better DNS, you can just use onion: domain is public key and you can even mine good domains (facebookcorewwwi.onion).