3 ms·
Isn't the main problem to secure the distribution of the key? > Maybe my site has been hacked and I don’t even know it. How would the fingerprint help in this
by dixie_land 3y ago
Isn't the main problem to secure the distribution of the key?
> Maybe my site has been hacked and I don’t even know it.
How would the fingerprint help in this case? If the fingerprint is also hosted on the website.
- ytret 3y agoI think one can verify the fingerprint by other means, e.g. phone
- pengaru 3y ago`gpg --auto-key-locate` is a thing, except not many actually use DANE for key distribution... https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Na...