Re:The modern HTTPS world has no place for old web servers
by snowwrestler on Wednesday May 13, 2020 @11:03AM
(#23167541)
It just moves the basis of trust from a diverse network of private CAs, any of which can be individually punished or distrusted if they misbehave, to the single centralized system of DNS, which rolls up to whomever controls your TLD of choice--entities who usually can't be removed, punished, or replaced.
[ Parent
| on HN ]
Re:The modern HTTPS world has no place for old web servers
by naniwaduni on Thursday May 14, 2020 @07:53AM
(#23178371)
Entities who also can de facto pull enough strings to authenticate to any CA as you, even under the existing system.
Re:The modern HTTPS world has no place for old web servers
by tasuki on Wednesday May 13, 2020 @04:54PM
(#23171724)
There's a blockchain project that attempts to decentralize TLDs - people would actually own their TLDs (by cryptography!), and would issue their own certificates. Only you and no one else would be able to issue a certificate for your TLD.
I've been shilling for this project enough, and feel it's a little offtopic here, but if you're really interested you can find it in my recent post history :)