3 ms·

This is great! I’ve been thinking a lot about the web PKI and I’m convinced that the future is a blockchain there. The current situation just doesn’t make sense

by baby 5y ago

This is great! I’ve been thinking a lot about the web PKI and I’m convinced that the future is a blockchain there. The current situation just doesn’t make sense, where too many CAs have powers to mess up and revocation barely work. And sometimes we can detect some of the attacks, instead of preventing them. In the future we’ll have a public registry implemented as a blockchain where browsers will receive light zero-knowledge proof of non-revoked certificate inclusion.

hiq 5y ago
> implemented as a blockchain Why?
- baby 5y ago
  So you can prevent attack, handle revocation, etc. while still preserving a decentralized group of certificate authorities
  - hiq 5y ago
    It's unclear how you get all these properties "just" by using a blockchain, but there are already other threads pointing that out here.