News for hackers. Stuff that matters.

A comment on Fix TLS – Let’s Get Rid of Certificates. Parent comment

Re:Fix TLS – Let’s Get Rid of Certificates by y0ghur7_xxx on Tuesday February 28, 2017 @03:07AM (#13752159)
> I completely disagree with this. Public key pinning has some well known problems that make it very dangerous to implement at scale

I don't know what you are commenting on, because the author of the linked article suggests we use Trust On First Use, not HPKP.

[ Parent | on HN ]
Re:Fix TLS – Let’s Get Rid of Certificates by merb on Tuesday February 28, 2017 @08:47AM (#13753674)
which is aweful from a user perspective, not everybody is an engineer. many many people would be more confused by that.
[ Parent | on HN ]