Re:DNS over HTTPS
by gcr on Wednesday January 17, 2018 @11:54AM
(#16169496)
I thought modern browsers ship with pinned certificates for Google and other large companies built in to the browser download.
[ Parent
| on HN ]
Re:DNS over HTTPS
by kernelPan1c on Wednesday January 17, 2018 @12:20PM
(#16169732)
Public key pinning helps but it operates on the assumption that the initial key is the correct one. I find it curious that these public keys are not readable by the client.