5 ms·

Then the telecoms would MITM it anyways.

• nitrogen 12y ago
  Certificate pinning and web-of-trust verification would make that difficult to maintain for long.
  • kaoD 12y ago
    It's unlikely they'll ever get mass usage because both are uncomfortable to work with. If a certificate is compromised, changing it means all pinned clients will get a huge warning. Either the user ignores the warning (in which case pinning is useless) or he doesn't and the site is harmed. Keeping a compromised certificate is even worse. For WoT you first need a web of trusted individuals. Unfortunately key distribution over insecure channels is still an unsolved problem.