2 ms·
A lot of other apps that use asymmetric crypto to authenticate the other end allow for “trust on first contact” for establishing trust. It’s a little disappoi
by swiley 7y ago
A lot of other apps that use asymmetric crypto to authenticate the other end allow for “trust on first contact” for establishing trust.
It’s a little disappointing that many browsers have no support for this whatsoever and most have very poor support for it.
- jchw 7y agoTOFU has its problems too, but its neither here nor there; CAs have been a part of HTTPS and SSL since the 90s. This news item, to me, does not signify any shift in whether a third party is needed or not.