3 ms·
The problems of certificate forgery and CA's that are too big to fail, can be fixed by extending the current system, to require certificates to be signed by mul
by mike-cardwell 15y ago
The problems of certificate forgery and CA's that are too big to fail, can be fixed by extending the current system, to require certificates to be signed by multiple CA's, who do not fall under the same jurisdiction or influences. I wrote about this idea yesterday:
https://grepular.com/Solving_the_SSL_CA_Debacle_Using_Multi-Signed_Certs https://grepular.com/Solving_the_SSL_CA_Debacle_Using_Multi-...
- marshray 15y agoN-of-M and co/countersigning schemes have been around forever. The problem isn't a lack of ideas or technical tools to fix it. The problem is that the industry prefers it the way it is.