3 ms·
What's the point of all that "merkle-tree based integrity checking + having the merkle root in DNS" without key exchange like X25519
by NavinF 3y ago
What's the point of all that "merkle-tree based integrity checking + having the merkle root in DNS" without key exchange like X25519
- the8472 3y agoThe ancient server box doesn't need to do that. Publishing the hashes to DNS can happen somewhere else. And the clients would have to trust their local resolver if they don't want to do the validation themselves.
- NavinF 3y agoHeh the only thing I use HTTP for that's compatible with your model is browsing Wikipedia, but I've already got a local copy of Wikipedia on my phone so it's hard for me to imagine why anyone would want to use your model. > trust their local resolver No thanks. There was a time when software would trust devices on the LAN. I'm not going back to the dark ages