3 ms·
> wouldn’t a potential solution be to layer independent verification mechanisms on top of the current system? CT[1] allows some kind of external audit, but thi
by j16sdiz 2y ago
> wouldn’t a potential solution be to layer independent verification mechanisms on top of the current system?
CT[1] allows some kind of external audit, but this is _mostly_ after the fact.
DNSSEC have much worse trust issue.
[1] https://certificate.transparency.dev/howctworks/ https://certificate.transparency.dev/howctworks/