3 ms·
Read the link, agreed it is a great idea. The problems are not technical, but that of trust. How do you get a reliable mechanism for trust that resists social
by CyberFonic 13y ago
Read the link, agreed it is a great idea.
The problems are not technical, but that of trust. How do you get a reliable mechanism for trust that resists social engineering?
Maybe the Hacker News community could be a starting point? Some combination of karma, longevity, vouching via LinkedIn, etc? Problem is that almost everything that I think of can be gamed. Maybe some other readers have a more comprehensive grasp of how to go about making such a CA solid and reliable.
- michaelmior 13y agoAgreed that trust is the biggest problem. Specifically, how do you convince major browser vendors they should ship with the root cert for your CA. If that doesn't happen, it drastically limits the practicality.
- CyberFonic 13y agopharaohgeek's response is an eyeopener. You could provide an easy to use guide for people to install your root certificate into their browser. Then it becomes a matter of making sure that your CA issued certificates are not abused. I think that is a huge risk if you can't make sure that spammers, etc can't get hold of your certificates.