3 ms·
You could use some website which you connect to securely (CA signed) which fetches and displays fingerprint C. You can then compare it to A and B and the one wh
by sfilipov 11y ago
You could use some website which you connect to securely (CA signed) which fetches and displays fingerprint C. You can then compare it to A and B and the one which matches C is the "true" one.
Of course the whole thing can be automated by the browser and happen behind the scene - i.e. Firefox connecting to a Mozilla service for each self signed website it sees and comparing the fingerprints. Then it can store information about this self-signed certificate as trusted.
- teraflop 11y agoThat sounds essentially the same as how Let's Encrypt works: https://letsencrypt.org/howitworks/technology/ https://letsencrypt.org/howitworks/technology/ Except that rather than creating a self-signed certificate and then asking an external service to store a fingerprint, you just let the external service sign your certificate. EDIT: Oh yeah, and signing the certificate up-front has the nice benefit of not forcing browsers to leak private information (namely, the domain names that are being accessed) to a centralized third party.