Re:TLS Everywhere, not https: URIs (2015)
by breatheoften on Monday August 08, 2016 @02:49AM
(#12245859)
That seems like a good idea -- a simple scheme where the browser validates every http response from a particular domain against a key specified in that domain's SSL cert (if the appropriate field is present in the https cert) -- seems like it would work well?
[ Parent
| on HN ]
Re:TLS Everywhere, not https: URIs (2015)
by anewhnaccount on Monday August 08, 2016 @02:59AM
(#12245895)
This is what MEGA does. See: https://github.com/meganz/webclient/blob/master/secureboot.j...