3 ms·
HTTPS is not hard, it's not even expensive anymore. Nothing stops us from using the same X509 rails backed by the same government that issued your id or driving
by Muromec 2y ago
HTTPS is not hard, it's not even expensive anymore. Nothing stops us from using the same X509 rails backed by the same government that issued your id or driving license (or corporate access card) to do the client certs too.
We even have hardware keys that are capable of that in most big corp techworkers pockets already.
- chii 2y agothe problem is that these are all trusted side channels (or regular channels that have been vetted). When an "emergency" happens, and the caller claims they're not able to use the regular channels of communication, how do you authenticate them?
- kreetx 2y agoWhen I say cryptography, I mean some means of end-to-end encryption (i.e, something which can't be faked or MITMed). What is hard is getting this implemented in consumer apps in a way that user doesn't need to know nor fully understand it, but only understand it to a degree to differenciate unsafe channels from safe.