News for hackers. Stuff that matters.

A comment on Launching in 2015: A Certificate Authority to Encrypt the Entire Web. Parent comment

Re:Launching in 2015: A Certificate Authority to Encrypt the... by IgorPartola on Wednesday November 19, 2014 @01:47PM (#8631795)
I am not quite sure what you are saying. Is it that it is in fact better to allow HTTP to exist vs providing HTTPS backed by some type of trusted infrastructure? Or is it that you are saying that we can build a brand new from scratch solution and need to fix the existing system somehow?
[ Parent | on HN ]
Re:Launching in 2015: A Certificate Authority to Encrypt the... by droopybuns on Wednesday November 19, 2014 @05:52PM (#8633216)
It's better to allow http to exist.

There is an opportunity for new authentication approaches that can't exist in a TLS-everywhere world.

I'm looking at http://en.wikipedia.org/wiki/Generic_Bootstrapping_Architect... in particular.

[ Parent | on HN ]