4 ms·
PKI is the worst form of authentication, except for all the others. I like to design secure protocols for fun, and they all inevitably converge into a PKI when
by BoppreH 13y ago
PKI is the worst form of authentication, except for all the others.
I like to design secure protocols for fun, and they all inevitably converge into a PKI when you start adding the non-trivial required features. It's incredibly frustatring.
- mike_hearn 13y agoI wrote an article called, "Why you think the PKI sucks but can't do any better" that goes over every single proposed alternative to it and explains why none of them work: https://medium.com/p/d04ea6a2c771 https://medium.com/p/d04ea6a2c771 It's also got links to various security usability studies that are required reading for anyone who cares about this space. tl;dr - the article is dumb, heartbleed doesn't even have anything to do with X.509.