News for hackers. Stuff that matters.

A comment on Final Removal of Trust in WoSign and StartCom Certificates. Parent comment

Re:Final Removal of Trust in WoSign and StartCom Certificates by snakeanus on Friday July 07, 2017 @05:56PM (#14722483)
I believe that it would be better if all CAs disappeared and a new system such as public-keys-as-urls/hashes-as-urls (like tor/i2p/gnunet/etc) or a web-of-trust based solution was adopted.

> Issuing certificates cost money

Making a post on HN probably costs more money than issuing certificates.

[ Parent | on HN ]
Re:Final Removal of Trust in WoSign and StartCom Certificates by Karunamon on Friday July 07, 2017 @09:39PM (#14723563)
Even if you're not using a proper PKI, you still have to trust someone at the end of the day to not be lying to you. That's ostensibly the point behind CAs and auditing and trust roots.

LE's probably the best we're going to get for a long time. Mozilla's one of the few groups I'd go so far as to say is completely benevolent, and LE is being operated as a public service.

[ Parent | on HN ]