3 ms·
Sizing Up Post-Quantum Signatures
- sesammases 5y agoWhat if people have one time use, per-site, encryption keys, then the connection to the site might not need TLS at all in the way it's used today. The user's identify is clear enough to the server processes handling the user's messages, but looks like just any other user's messaging to a global listening entity. Then we're down to just needing to solve PKI, which can be handled on a slower timescale than TLS connections where a large portion of the traffic is bots. Sites could publish signed unencrypted manifests of their public content. If you have a login with extra access you would download a manifest for the non-public site, and like today, you could compare its contents between users to know if you get different active content than your colleague.