3 ms·
> It is also the first browser to support secure web browsing with DANE. Props for that. I wish we moved away from CAs.
by yakubin 5y ago
> It is also the first browser to support secure web browsing with DANE.
Props for that. I wish we moved away from CAs.
- cryptonector 5y agoYou get CAs with DNSSEC/DANE, just not PKIX CAs (though you can have those too).
- heavyset_go 5y agoAgreed. I don't like the trend of devices, especially IoT devices, that bake in support for CAs without supporting other certificates or allowing you to adjust their trust stores. Real attempts at decentralization away from CAs might force companies to change how their devices deal with certificates and trust, hopefully putting power back in the hands of device owners.