Re:Decentralized Naming and Certificate Authority
by vbezhenar on Wednesday February 12, 2020 @01:14PM
(#22311154)
Everyone can put self-signed cert on a blockchain. You need to prove that you control the domain. Easiest way to prove that is to ask your registrar. And if your registrar will sign this fact you don't even need to ask him. So you naturally will come to DNS and DNSSec. And all standards are already here: deploy DNSSec, put TLSA record and it's done. It's a solved problem, just not widely supported.
[ Parent
| on HN ]
Re:Decentralized Naming and Certificate Authority
by uberdru on Wednesday February 12, 2020 @01:30PM
(#22311328)
"prove that you control the domain"? isn't that the rub? sounds a bit circular to me at least. there doesn't seem to be any solid replacement for the existing centralized trust authorities. what am i missing?
Re:Decentralized Naming and Certificate Authority
by vbezhenar on Wednesday February 12, 2020 @01:56PM
(#22311603)
As long as we're talking about conventional DNS, it's centralized by design. And if you want to build a better DNS, you can just use onion: domain is public key and you can even mine good domains (facebookcorewwwi.onion).