News for hackers. Stuff that matters.

A comment on Universal SSL. Parent comment

Re:Universal SSL by sbierwagen on Monday September 29, 2014 @11:16AM (#8383248)
Or public key pinning: http://tools.ietf.org/html/draft-ietf-websec-key-pinning-19
[ Parent | on HN ]
Re:Universal SSL by ultramancool on Monday September 29, 2014 @11:19AM (#8383265)
Yeah, if they supported that and showed you the fingerprint of the pinned key it may be workable. My worry with that is that few of the smaller websites would bother to validate it. Pasting a fingerprint in removes the need.
[ Parent | on HN ]