3 ms·
Maybe it would be nice then if TLS would somehow cache host keys, too? Like my browser caching the relationship: www.bank.com is 1.2.3.4 with pub key XYZ Or i
by onnoonno 12y ago
Maybe it would be nice then if TLS would somehow cache host keys, too? Like my browser caching the relationship:
www.bank.com is 1.2.3.4 with pub key XYZ
Or is this already implemented and I am too stupid to find it?
- peterwwillis 12y agoSince this kind of goes against the point of using an intermediary to verify the host key, and multiple services and hosts make this much more difficult to support, it's not built into TLS. But the application can add support for it. There are experimental web standards and methods for various OSes/applications here https://www.owasp.org/index.php/Certificate_and_Public_Key_Pinning#Examples_of_Pinning https://www.owasp.org/index.php/Certificate_and_Public_Key_P...