News for hackers. Stuff that matters.

A comment on How to distrust a CA without any certificate errors. Parent comment

Re:How to distrust a CA without any certificate errors by tptacek on Friday March 07, 2025 @01:31PM (#43292772)
Well, I will give you this: this is a novel take. The WebPKI and DANE, because, heck, it's all compromised anyways.

Personally: I'm for anything that takes leverage away from the CAs.

[ Parent | on HN ]
Re:How to distrust a CA without any certificate errors by cryptonector on Friday March 07, 2025 @02:24PM (#43293431)
Well, it's u/LegionMammal978's novel take, I just riffed on it.

> Personally: I'm for anything that takes leverage away from the CAs.

You can automate trusted third parties all you want, but in the end you'll have trusted third parties one way or another (trust meshes still have third parties), and there. will. be. humans. involved.

[ Parent | on HN ]