clinta

20 ms·

1. 211.▲
   by clinta 11y ago

   As bad as the CA system is, I have not seen evidence that it's 'widely trojaned' or broken. The fact that a falsely minted certificate is such big news is evidence to the fact that it is working pretty well despite it's
2. 212.▲
   by clinta 11y ago

   I have yet to see an opponent of https everywhere address the fact that https provides important authentication. Isn't it important that when you go to your governments emergency status page you see what they published rather than the
3. 213.▲
   by clinta 11y ago

   CA's do not discard the subject alternative name extension. You at least need to add that.
4. 214.▲
   by clinta 11y ago

   PowerShell 4 for Windows 7: http://www.microsoft.com/en-us/download/details.aspx?id=4085...
5. 215.▲
   by clinta 11y ago

   You don't need bitcoin for this at all. Just some of the crypto that bitcoin is built on. 1. Generate a random 256 bit number which is your ed25519 private key. 2. The public key is your username. 3. foo.com sends you a 256 bit nonce.
6. 216.▲
   by clinta 12y ago

   This is called DANE described in RFC 6698. But it requires DNSSEC. Without DNSSEC, the visitor to the site can be easily be MITM'd by spoofing DNS. It is presumably more secure when a CA verifies an email (or DNS) because the CA can co
7. 217.▲
   by clinta 12y ago

   I'm not a lawyer and can't comment on if they are liable or not, but I take issue with the idea that they should be. Adding this liability just compounds the current issues where felons are nearly incapable of becoming employed af