3 ms·
Except for cert pinning. I think moxie is working on a general form of that right now.
by mpyne 13y ago
Except for cert pinning. I think moxie is working on a general form of that right now.
- dlitz 13y agoCert pinning doesn't solve that problem. Cert pinning solves the problem of a compromised CA signing false certificates. If an attacker has the private key of the endpoint, cert pinning will do nothing.
- mpyne 13y agoI.e. the attacker completely simulates the desired endpoint since they have the priv key, DNS and all? I think that makes sense indeed.