4 ms·
> (Although… we really need a way to do TLS/QUIC to an endpoint without a domain name.) Generate self-signed cert, let the client TOFU. And skip the HTTP part.
by the8472 3y ago
> (Although… we really need a way to do TLS/QUIC to an endpoint without a domain name.)
Generate self-signed cert, let the client TOFU. And skip the HTTP part. Just like SSH. There's no reason to do things like a browser.
- amluto 3y agoI think we could do much better than this with a small amount of creativity. But it really ought to be possible to securely configure locally-connected devices with a browser, and this is not really possible today.