3 ms·
You certainly can have authenticity without encryption - just think of how Debian package downloads are authenticated with gpg. In fact this option is built int
by red_admiral 12y ago
You certainly can have authenticity without encryption - just think of how Debian package downloads are authenticated with gpg. In fact this option is built into TLS - RSA/SHA with the null cipher suite.
It doesn't solve the CA problem or the cost problem (you still have the whole cost of setting up a TLS session, actually encrypting the payload is the cheap part). But it's possible.