Security by obscurity is underrated

Re:Security by obscurity is underrated by austincheney on Saturday September 12, 2020 @09:10AM (#24452144)

Yeah, I am on a DODIN as I write this. In the civilian world a CA falls back on a decentralized scheme called Web of Trust which allows CAs to recipricate certs from other CAs and invalidate other CAs as necessary.

The DOD chose to create their own CA scheme originally for financial reasons in that over a long enough time line new infrastructure pays for itself with expanded capabilities while minimizing operation costs dependent upon an outside service provider. This was before CACs were in use.

https://en.wikipedia.org/wiki/Web_of_trust

[ Parent | on HN ]

Re:Security by obscurity is underrated by blackflame7000 on Saturday September 12, 2020 @09:30AM (#24452258)

Thanks for the additional info, I didnt know (but probably should have assumed) that finance was the primary motivator. I just had to implement CAC authentication for a webapp and they still use their own CAs for client-side certs aka cac’s so it seems like it was a pretty savy investment at the time that’s not going away anytime soon

[ Parent | on HN ]