Libsodium 1.0.0 released

Re:Libsodium 1.0.0 released by ary on Wednesday September 24, 2014 @03:57PM (#8363742)

I'm curious to know what you'd recommend for people who are looking to build applications around novel network protocols that aren't interested in the the certificate authority aspect of TLS?

[ Parent | on HN ]

Re:Libsodium 1.0.0 released by tptacek on Wednesday September 24, 2014 @05:40PM (#8364302)

There's no reason you have to use CAs to authenticate TLS. Plenty of enterprise tools keep whitelists of certificate hashes instead.

[ Parent | on HN ]

Re:Libsodium 1.0.0 released by bjornsing on Wednesday September 24, 2014 @04:26PM (#8363925)

There's an RFC on TLS with raw public keys that you should probably check out: http://tools.ietf.org/html/draft-ietf-tls-oob-pubkey-02.

[ Parent | on HN ]

Re:Libsodium 1.0.0 released by jewel on Wednesday September 24, 2014 @07:03PM (#8364656)

There are several TLS modes that don't use certificates. SRP and PSK are the two that I have some limited experience with. Both require sharing a password or key beforehand through some other medium.

If you're not concerned with man-in-the-middle attacks, then you could also use the ANON modes.

[ Parent | on HN ]

Re:Libsodium 1.0.0 released by revelation on Thursday September 25, 2014 @08:33AM (#8366782)

If you control the client software, theres no reason to use a certificate authority instead of making your own CA or just using self-signed certificates.

[ Parent | on HN ]

Re:Libsodium 1.0.0 released by higherpurpose on Wednesday September 24, 2014 @07:34PM (#8364741)

This maybe:

https://github.com/okTurtles/dnschain

[ Parent | on HN ]