4 ms·
You can't trust any. Centralized certificate authorities are a weakness. We need to get distributed trust system like a Bitcoin of CA.
by achalkley 13y ago
You can't trust any. Centralized certificate authorities are a weakness. We need to get distributed trust system like a Bitcoin of CA.
- jlgaddis 13y agoRFC 6698: >The DNS-Based Authentication of Named Entities (DANE) > Transport Layer Security (TLS) Protocol: TLSA https://tools.ietf.org/html/rfc6698 https://tools.ietf.org/html/rfc6698
- tptacek 13y agoDANE. The proposal where the DNS becomes the new CA, so the United States Government can be the root of all CAs. Good plan.