News for hackers. Stuff that matters.

A comment on Safari will no longer trust certs valid for more than 13 months. Parent comment

Re:Safari will no longer trust certs valid for more than 13 ... by swiley on Sunday February 23, 2020 @07:44PM (#22400655)
A lot of other apps that use asymmetric crypto to authenticate the other end allow for “trust on first contact” for establishing trust.

It’s a little disappointing that many browsers have no support for this whatsoever and most have very poor support for it.

[ Parent | on HN ]
Re:Safari will no longer trust certs valid for more than 13 ... by jchw on Sunday February 23, 2020 @07:54PM (#22400700)
TOFU has its problems too, but its neither here nor there; CAs have been a part of HTTPS and SSL since the 90s. This news item, to me, does not signify any shift in whether a third party is needed or not.
[ Parent | on HN ]