4 ms·

Is there any recourse for a free web going forward?

• bannedbybros 3y ago
  [dead]
• anononaut 3y ago
  Not one that will be legal in the EU in the long term.
  • privacy-please 3y ago
    Is it possible to build a trustless authentication system, that doesn't need certificates ? Cert-authorities have always been a attack-vector, which wasn't too bad because if they got compromised trust could be revoked, minimizing the damage. If that can't be done anymore because of legal or political risk, maybe a better system can be designed, which doesn't have this potential ? Maybe technical design has to take into account the existence of bad political actors, and minimize the political and legal attack surfaces not just the technical ones.
• adolph 3y ago
  Certificate and Public Key Pinning [0] but its not a free lunch [1] 0. https://owasp.org/www-community/controls/Certificate_and_Public_Key_Pinning https://owasp.org/www-community/controls/Certificate_and_Pub... 1. https://www.digicert.com/blog/certificate-pinning-what-is-certificate-pinning https://www.digicert.com/blog/certificate-pinning-what-is-ce...