4 ms·
> which requires browsers to report the certificate fingerprints and CA to a notary server Browsers sending each certificate fingerprint (which can easily be t
by p-e-w 4y ago
> which requires browsers to report the certificate fingerprints and CA to a notary server
Browsers sending each certificate fingerprint (which can easily be translated to a hostname by building a database of certificates) to a server on the Internet has got to be one of the worst ideas in the history of information security. Yet more institutions knowing every domain you connect to is the absolute last thing we need.
- stevewatson301 4y agoYou could do stuff like k-anonimity and onion routing (where every layer is run by a different company, similar to Apple Private Relay) to mitigate some of it, although it wasn't there in the initial implementation of the Perspectives project.