undefined | Better HN

0 pointsgwu7812y ago0 comments

Certificates could be initially delivered out of band, e.g., in person, or by postal mail. Perhaps in a printed format that can be scanned in.

But then there's no way of telling which postal mail is actually from Google, right? :)

0 comments

nwh12y ago

We'll sign the out of band letters with their signing key to prove it's aut- wait. Chicken and egg problem.

gwu78OP12y ago

Or we could just sign the OOB letters, on company letterhead, with an ink pen.

j / k navigate · click thread line to collapse

0 pointsgwu7812y ago0 comments

Certificates could be initially delivered out of band, e.g., in person, or by postal mail. Perhaps in a printed format that can be scanned in.

But then there's no way of telling which postal mail is actually from Google, right? :)

nwh12y ago

We'll sign the out of band letters with their signing key to prove it's aut- wait. Chicken and egg problem.

gwu78OP12y ago

Or we could just sign the OOB letters, on company letterhead, with an ink pen.

j / k navigate · click thread line to collapse