News for hackers. Stuff that matters.

A comment on Why HTTP without encryption and self-signed sertificates are OK. Parent comment

Re:Why HTTP without encryption and self-signed sertificates ... by tamrix on Tuesday September 13, 2022 @06:16AM (#32822436)
There's a Web3 project called Dane. Which seeks to add CAs to the blockchain. I suppose if successful, you wouldn't need to trust a company but instead a blockchain. But with all the web3 hate these days, it probably won't see the light of day.
[ Parent | on HN ]
Re:Why HTTP without encryption and self-signed sertificates ... by account42 on Tuesday September 13, 2022 @09:16AM (#32823860)
That's funny because we already have DANE [0] for DNS-based certificates and that's precisely the right place for domain-validated certs. No blockchain needed.

[0] https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Na...

[ Parent | on HN ]