Let's Encrypt now supports ACME-CAA: closing the DV loophole

Re:Let's Encrypt now supports ACME-CAA: closing the DV loophole by diervo on Sunday December 18, 2022 @02:18AM (#34035677)

After all of the block-chain hype nonsense all these years, this might be the first truly prefect use case for append-only, publically auditable ledgers that makes all the sense in the world

[ Parent | on HN ]

Re:Let's Encrypt now supports ACME-CAA: closing the DV loophole by ajvs on Sunday December 18, 2022 @02:36AM (#34035735)

Whilst blockchain-based domains like Namecoin are great for security they don't go far enough in my opinion. Certificate authorities and DNS infrastructure are heavily centralised at the root level, so something like the Handshake Protocol[1] is a necessary decentralised alternative.

[1] https://handshake.org/

[ Parent | on HN ]

Re:Let's Encrypt now supports ACME-CAA: closing the DV loophole by voiper1 on Sunday December 18, 2022 @02:24AM (#34035699)

... which was still implemented without blockchain.

[ Parent | on HN ]

Re:Let's Encrypt now supports ACME-CAA: closing the DV loophole by bawolff on Sunday December 18, 2022 @02:46AM (#34035759)

To be fair, the definition of blockchain is so vauge that there is a reasonable argument that certificate transparency is a block chain. But yes i agree, CT is awesome and avoids the bitcoin BS.

[ Parent | on HN ]

Re:Let's Encrypt now supports ACME-CAA: closing the DV loophole by eru on Sunday December 18, 2022 @07:20AM (#34037030)

Git is an append-only ledger of this kind.

(Well, append-only plus regular garbage collection.)

[ Parent | on HN ]