3 ms·
I can't be sure, but: - It's possible to deliver SSL without putting the keys on boxes; of course there's a need for a network connection to the servers holding
by alanfranz 7y ago
I can't be sure, but:
- It's possible to deliver SSL without putting the keys on boxes; of course there's a need for a network connection to the servers holding keys. It's a tech pioneered by cloudflare, can't rememeber the name.
- or, there's no SSL for the content, which is signed otherwise (like ubuntu or debian repos).
- ignoramous 7y ago> ...network connection to the servers holding keys. It's a tech pioneered by cloudflare... They announced Keyless SSL way back when: https://blog.cloudflare.com/keyless-ssl-the-nitty-gritty-technical-details/ https://blog.cloudflare.com/keyless-ssl-the-nitty-gritty-tec... I'm a fan of Facebook's take on this, though: https://engineering.fb.com/security/delegated-credentials/ https://engineering.fb.com/security/delegated-credentials/ Also see, Google's answer to JWTs: Macaroons-- https://hackingdistributed.com/2014/05/16/macaroons-are-better-than-cookies/ https://hackingdistributed.com/2014/05/16/macaroons-are-bett...