3 ms·
>As far as MITM and identity go, could we at least modify the >protocol to allow fingerprint caching, as opposed to certs, >as a fallback? We already have th
by hannob 12y ago
>As far as MITM and identity go, could we at least modify the
>protocol to allow fingerprint caching, as opposed to certs,
>as a fallback?
We already have that. It's called HTTP Public Key Pinning (HPKP). But not "opposed to certs". In addition. Which is the right thing to do: Don't use it as a replacement for existing security, but add it on top of what we already have.
- chjj 12y agoYeah, I agree with you. I suppose I worded that strangely. I didn't mean cut certs out of the equation, just use fingerprints as fallback, if possible. I wasn't aware of HPKP. According to mozilla docs, it's lacking some browser support. If it got implemented across the board, this would be great. I suppose it also depends on whether or not the browser screams at the user if the fingerprint fallback is necessary.