News for hackers. Stuff that matters.

A comment on Https hurts users far away from the server. Parent comment

Re:Https hurts users far away from the server by 220 on Friday March 10, 2017 @02:51PM (#13841519)
If you use cert pinning, like the DigiNotar/Iran/Gmail, you're still protected against a trusted CA, assuming you've communicated in the past, which is realistic for a real world attack.

It's an attack that's difficult to deploy because it's easy to detect if you're looking in the right places, and as soon as it's detected, you know the CA has been compromised, and the attacker loses a large investment.

[ Parent | on HN ]
Re:Https hurts users far away from the server by StavrosK on Friday March 10, 2017 @05:14PM (#13842635)
It's not as difficult to deploy if you can only target specific users, but I agree with you. The problem with cert pinning is that it's hard to do, because, if you make a mistake, nobody can access your site for quite a long time...
[ Parent | on HN ]