Re:Your statement is correct but misses the point
by Ensorceled on Monday April 13, 2020 @09:21AM
(#22855578)
Ok. So, are you saying that we should stop using HTTPS and instead use HTTP? If you are not, what is your point? Is it not under the 100% correct but missing the point label this article is talking about?
[ Parent
| on HN ]
Re:Your statement is correct but misses the point
by anticristi on Wednesday April 15, 2020 @03:12PM
(#22881796)
Well, you could use HTTP over an IPSec tunnel with a pre-shared key (obviously distributed face-to-face), and that would have been resistant to a CA being hijacked.
However, nowadays, I believe with CT HTTPS is really safe. But again, someone had to nitpick on the security limitations of HTTPS for CT to be invented.