3 ms·
Wouldn't it provide good additional security if there would be a possibility to define those HTTPS Pins [1] in the DNS, in TXT recods? This would be fairly lig
by jpalomaki 15y ago
Wouldn't it provide good additional security if there would be a possibility to define those HTTPS Pins [1] in the DNS, in TXT recods?
This would be fairly lightweight way for me to say which CA(s) I use for a particular domain.
[1] http://www.imperialviolet.org/2011/05/04/pinning.html http://www.imperialviolet.org/2011/05/04/pinning.html
- jpalomaki 15y agoWith second thought this does not make sense. False certificates would be only problem in man-in-the-middle attacks of if the attacker can alter information in dns. In both cases the attacker could also fake the information about valid ca's.