News for hackers. Stuff that matters.

A comment on Free SSL Certificate for Open Source Projects. Parent comment

Re:Free SSL Certificate for Open Source Projects by orthecreedence on Saturday June 07, 2014 @05:59PM (#7863239)
Agreed, CAs are an easily-exploitable smokescreen. Distribution is the way to go here. Seems like you could post your public key in the data section of a namecoin domain entry, no?

I think there is movement on this type of system, but it's slow because people don't realize just how insecure HTTPS is when CAs and the US government are involved.

[ Parent | on HN ]
Re:Free SSL Certificate for Open Source Projects by jwgur on Saturday June 07, 2014 @06:25PM (#7863311)
More like they don't care about that category of threats.
[ Parent | on HN ]
Re:Free SSL Certificate for Open Source Projects by EGreg on Saturday June 07, 2014 @10:16PM (#7863772)
Is there any work on a project like this that you know of?
[ Parent | on HN ]
Re:Free SSL Certificate for Open Source Projects by orthecreedence on Saturday June 07, 2014 @10:20PM (#7863781)
I heard of a project a while back, but haven't seen it since and I forget the name. My understanding is that it's slow going. I think the best bet is, as mentioned, piggyback onto the blockchain somehow. Namecoin is probably the closest to getting this right.
[ Parent | on HN ]