3 ms·

The internet model of key exchanges sucks, and there is currently much wailing and gnashing of teeth over what to do about it. That's what linus is talking abou

The internet model of key exchanges sucks, and there is currently much wailing and gnashing of teeth over what to do about it. That's what linus is talking about here: "They are almost certainly going to be more secure than depending on some crazy root of trust based on a big company, with key signing authorities that trust anybody with a credit card." Not to mention this kind of thing: https://bugzilla.mozilla.org/show_bug.cgi?id=476766 https://bugzilla.mozilla.org/show_bug.cgi?id=476766 Also, when it comes to stuff this important, there is no such thing as a trusted neutral party.

UnoriginalGuy 14y ago
The internet model of key exchanges /does/ suck, but yet somehow the Secure Boot model is yet worse still. The main issue with the internet model is how uncompetitive the whole thing is. You have just a few companies handing out keys and they charge upwards of $50 a year just for the "pleasure" of having secured communications. Secure boot would likely suffer from the same problem. But yet I'd still take that over this...