3 ms·
DNS Dane, SSL singing with 2 CA's, peer-based trust, SSL pinning. We probably need a mix ... and none seems to be ideal. What would help is be more ruthless wh
by Qantourisc 12y ago
DNS Dane, SSL singing with 2 CA's, peer-based trust, SSL pinning.
We probably need a mix ... and none seems to be ideal.
What would help is be more ruthless when CA's mess up, and no the pussy approach we are using now: do nothing.