4 ms·
> If DNS would be based on cryptographic identity, then we wouldn't even need CAs, and we wouldn't even need that giga zip file of universal trust in foreign or
by Avamander 3y ago
> If DNS would be based on cryptographic identity, then we wouldn't even need CAs, and we wouldn't even need that giga zip file of universal trust in foreign organizations called ca-certificates.
How would that avoid creating DNS CAs?
- 8organicbits 3y agoTypically the domain name of the service is related to (i.e. the fingerprint of) the public key being used. This is unfortunately painful to use, so I don't know anyone using it at scale outside Tor's onion services. https://community.torproject.org/onion-services/advanced/https/ https://community.torproject.org/onion-services/advanced/htt...