News for hackers. Stuff that matters.

A comment on Microsoft silently adds Amazon root certificates to its CTL. Parent comment

Re:Microsoft silently adds Amazon root certificates to its CTL by rtpg on Friday January 22, 2016 @03:19AM (#10951461)
but all decentralised proposals I've ever seen fall over at scale, or become basically the CA system when applied at a big enough scale.

I would like to be pointed out to be wrong here, though. the current CA system bugs me for the "one CA compromised" aspect.

[ Parent | on HN ]
Re:Microsoft silently adds Amazon root certificates to its CTL by arpa on Friday January 22, 2016 @04:09AM (#10951655)
What about DANE? I would imagine it has potential to do away with CA...
[ Parent | on HN ]
Re:Microsoft silently adds Amazon root certificates to its CTL by icebraining on Friday January 22, 2016 @04:23AM (#10951712)
https://www.imperialviolet.org/2015/01/17/notdane.html
[ Parent | on HN ]
Re:Microsoft silently adds Amazon root certificates to its CTL by arpa on Friday January 22, 2016 @05:15AM (#10951872)
Well that definitely answers my question. Thank you. What about something like certificate blockchain?

e.g. https://github.com/okTurtles/dnschain

[ Parent | on HN ]
Re:Microsoft silently adds Amazon root certificates to its CTL by hannob on Friday January 22, 2016 @05:50AM (#10951991)
It already exists and is called Certificate Transparency: https://www.certificate-transparency.org/
[ Parent | on HN ]
Re:Microsoft silently adds Amazon root certificates to its CTL by arpa on Friday January 22, 2016 @07:58AM (#10952414)
holy sh*t it's learning day today! Thanks!
[ Parent | on HN ]