4 ms·
If the web browsers would adopt DANE, we could bypass CAs and still have TLS.
by ryao 2y ago
If the web browsers would adopt DANE, we could bypass CAs and still have TLS.
- xorcist 2y agoA domain validated secure key exchange would indeed be a massive step up in security, compared to the mess that is the web PKI. But it wouldn't help with the issue at hand here: home router boostrap. It's hard to give these devices a valid domain name out of the box. Most obvious ways have problems either with security or user friendliness.