4 ms·
There is no domain trust problem, because there is no trust to be had on domains.
by zokier 2y ago
There is no domain trust problem, because there is no trust to be had on domains.
- immibis 2y agodo you trust that you are on Hacker News right now?
- mindcrime 2y agoMaybe it would be better to say "there is no inherent trust on domains". I trust HN today because I was on HN yesterday, and the day before, and last year, and 10 years ago, etc., and it's always been trustworthy (so far as I know). But if I saw a link tomorrow for hackernews.shop and I went there, I'd be very suspicious.
- zokier 2y agoWhat I meant was that you can not put any trust in the contents of DNS labels, they should be handled as opaque blob-like identifiers. The only meaningful thing you can do with domain name is to compare it's labels to some reference. So no, I don't trust that I'm on HN because of I put any trust in the domain "news.ycombinator.com" signifying anything. I only trust that I'm on same HN that I was on yesterday because the domain matches exactly the reference value. But the domain name could be anything, as long as it is stable.
- motorest 2y ago> do you trust that you are on Hacker News right now? Is Hacker News asking for my credit card or impersonating any other site?
- bdangubic 2y agowhere am I…??