News for hackers. Stuff that matters.
Re:SSL And The Future Of Authenticity by wyager on Sunday April 21, 2013 @03:47AM (#5584233)
Seems to me like Namecoin is a practical, secure method of distributed identification and verification. It's basically a secure P2P key:value store based off of Bitcoin's method of operation. Its original intent was to replace DNS (the website name is the key, the IP address is the value), but I see no reason why we couldn't also use it to host public keys.
Re:SSL And The Future Of Authenticity by twoodfin on Sunday April 21, 2013 @10:19AM (#5584907)
How does it stop me from saying "Bank of America's public key is <my public key>"?
Re:SSL And The Future Of Authenticity by Dylan16807 on Sunday April 21, 2013 @01:04PM (#5585445)
Nothing. The same way you can go buy iamthebankofamerica.com for a couple bucks and put all the keys you like on it. But once you go to the actual Bank of America domain record you'll get back the real certificates.
Re:SSL And The Future Of Authenticity by wyager on Sunday April 21, 2013 @10:09PM (#5587383)
BoA would have to buy the rights to that name from whoever got it before them.