News for hackers. Stuff that matters.

A comment on Show HN: Sslhash: SSL without a certificate authority. Parent comment

Re:Show HN: Sslhash: SSL without a certificate authority by nemothekid on Thursday February 08, 2018 @10:52PM (#16337785)
You would probably need some sort of "authority" to redistribute the hashes.
[ Parent | on HN ]
Re:Show HN: Sslhash: SSL without a certificate authority by jsiepkes on Friday February 09, 2018 @01:33AM (#16338361)
The was / is a DNS standard for that: DANE. Sadly DANE was never really adopted. Chrome had support for it but it was removed eventually.
[ Parent | on HN ]
Re:Show HN: Sslhash: SSL without a certificate authority by lasdfas on Friday February 09, 2018 @09:28AM (#16340358)
One of the main reasons for the library is no need for cert authority. Why not just create a regular cert Authority certificate and put the trusted authority cert on the clients. That makes it so you almost never have to change the clients certs. Also, it's supported by standard TLS libraries and clients.
[ Parent | on HN ]
Re:Show HN: Sslhash: SSL without a certificate authority by jD91mZM2 on Friday February 09, 2018 @09:40AM (#16340438)
True, didn't think of that. The server would still have to generate it using a command though... I like having things automated.
[ Parent | on HN ]