I'm a fan of TACK because it gives site operators the same abilities as Google to ensure a rogue CA hasn't certified an attacker to impersonate them. This draf

I'm a fan of TACK because it gives site operators the same abilities as Google to ensure a rogue CA hasn't certified an attacker to impersonate them. This draft makes some minor changes. One of the most important ones is that it lets you make a new TACK before unlocking the old one. This means there's no period of time in the middle, no matter how short, for an attacker to interpose a new lock. The main site with overview is here: http://tack.io/ http://tack.io/ There are existing tools on github to start playing with this: https://github.com/tack https://github.com/tack Here's the announcement with links to the various patches, downloads, and tools. Note that a couple links are broken, as per the followup msg. https://lists.riseup.net/www/arc/tack/2012-09/msg00003.html https://lists.riseup.net/www/arc/tack/2012-09/msg00003.html https://lists.riseup.net/www/arc/tack/2012-09/msg00004.html https://lists.riseup.net/www/arc/tack/2012-09/msg00004.html