undefined | Better HN

0 pointssgc10y ago0 comments

I don't think he was saying they acted poorly by announcing on HN, but that he would prefer to grant someone trust rather than have it forced on him before he even knew about it. Not an easy task for a functional web, but it would obviously be better if possible.

0 comments

Natanael_L10y ago

There's many ways, all obnoxiously complex unless you go back to a CA-ish voluntary trust model.

Keys as addresses (I2P, Tor hidden services, CJDNS) fixes a large part of the security problem, then on top of that you can add your choice of address translation. WoT style individualized trust webs? Trusted lists of name assignments DNS style? First-come first-serve á la Namecoin?

xorcist10y ago

Not necessarily. You could also place domain validated trust in the registrars, to cryptographically verify their delegations. That would build a chain of trust which you in turn could use to validate keys for services in those domains.

Natanael_L10y ago

That's the DNSSEC+DANE approach and that's still the same as the DNS approach I listed (trusted name registry lists), except that the address isn't an IP-address (or in other words, your domain's DNS server that says what IP addresses your subdomains have is itself identified by a public key).

j / k navigate · click thread line to collapse

0 pointssgc10y ago0 comments

0 comments

Natanael_L10y ago

There's many ways, all obnoxiously complex unless you go back to a CA-ish voluntary trust model.

xorcist10y ago

Natanael_L10y ago

j / k navigate · click thread line to collapse