News for hackers. Stuff that matters.

A comment on Maintaining Digital Certificate Security. Parent comment

Re:Maintaining Digital Certificate Security by zaroth on Tuesday March 24, 2015 @02:57AM (#9255208)
Of course how could I have not mentioned the blockchain? Thank you!

Part of the trick with blockchain is validation. Everyone is not going to keep a full node, not even close, and just delegating trust is not the answer. You want to trust but verify.

I'm not sure what the state-of-the-art is these days for SPV-type verification, but I don't see anything in the current DNSChains response which would allow any kind of independent verification of the returned data.

Edit, also see: https://en.bitcoin.it/wiki/User:Gmaxwell/namecoin_that_sucks...

[ Parent | on HN ]
Re:Maintaining Digital Certificate Security by itistoday2 on Tuesday March 24, 2015 @03:29AM (#9255279)
> Part of the trick with blockchain is validation. Everyone is not going to keep a full node, not even close, and just delegating trust is not the answer. You want to trust but verify.

Right, so hence the two techniques I mentioned in my reply: query more than one server, and/or use Dionysis' "proof of transition" (for lack of a better name).

[ Parent | on HN ]