A remember hearing a talk about a half solution to the broken model of HTTPS that could be done with the existing system, which was either a proposol or being i

A remember hearing a talk about a half solution to the broken model of HTTPS that could be done with the existing system, which was either a proposol or being implenented. The idea was that when you establish an HTTPS connection to a new site, you save their certificate for a certain amount of time. In the future when you log in, if the certificate they provide dissagrees with the one you have then you assume it is compromised. Becuase of the obvious promblem of legitimatly changing certificates there was a mechanism for the server to inform you of that, but this requires active participation by the server, so the entire system is only done if the server explicitly enables it. In the long term, we need to replace HTTPS entirely.