4 ms·
Definitely Superfish inspired some thinking on this topic but I do understand that a compromised system is compromised so better CA or external consensus does n
by rubyfan 12y ago
Definitely Superfish inspired some thinking on this topic but I do understand that a compromised system is compromised so better CA or external consensus does nothing there.
Even still, I'm not totally convinced browsers will spot the MITMs so I don't have to. However, having many-many individual web browsers tracking and sharing SSL fingerprints to potentially provide consensus as well as some history and traceability I believe would be a needed public service.
- wmf 12y agohttp://perspectives-project.org/ http://perspectives-project.org/ http://www.convergence.io/ http://www.convergence.io/
- forgotpasswd3x 12y agoI wish convergence was still actively developed. It seemed like a really cool idea.
- tptacek 12y agoI'm still unclear on why Superfish motivates this stuff, since virtually nothing you can come up with to strengthen TLS trust trumps an adversary who images your machine.