Comment by sugarpimpdorsey 1 day ago I'm sure those six-day lifetime certificates will work out real nice. 7 comments sugarpimpdorsey Reply ocdtrekkie 1 day ago I think I am going to become a fan of shorter certificate lifetimes because as soon as the chuckleheads in the CAB truly break the Internet on the level they are pushing for, the sooner we get to discard the entire PKI dumpster fire. NooneAtAll3 1 day ago what's the alternative to PKI? haiku2077 1 day ago Certainly something a hell of a lot simpler then x509 - and without assumptions from the 1990s hardcoded into it 1 reply → greyface- 1 day ago https://en.wikipedia.org/wiki/Decentralized_identifier 1 reply → dylan604 1 day ago no alternative. just eliminate the thing not liked. it's called being DOGEd
ocdtrekkie 1 day ago I think I am going to become a fan of shorter certificate lifetimes because as soon as the chuckleheads in the CAB truly break the Internet on the level they are pushing for, the sooner we get to discard the entire PKI dumpster fire. NooneAtAll3 1 day ago what's the alternative to PKI? haiku2077 1 day ago Certainly something a hell of a lot simpler then x509 - and without assumptions from the 1990s hardcoded into it 1 reply → greyface- 1 day ago https://en.wikipedia.org/wiki/Decentralized_identifier 1 reply → dylan604 1 day ago no alternative. just eliminate the thing not liked. it's called being DOGEd
NooneAtAll3 1 day ago what's the alternative to PKI? haiku2077 1 day ago Certainly something a hell of a lot simpler then x509 - and without assumptions from the 1990s hardcoded into it 1 reply → greyface- 1 day ago https://en.wikipedia.org/wiki/Decentralized_identifier 1 reply → dylan604 1 day ago no alternative. just eliminate the thing not liked. it's called being DOGEd
haiku2077 1 day ago Certainly something a hell of a lot simpler then x509 - and without assumptions from the 1990s hardcoded into it 1 reply →
I think I am going to become a fan of shorter certificate lifetimes because as soon as the chuckleheads in the CAB truly break the Internet on the level they are pushing for, the sooner we get to discard the entire PKI dumpster fire.
what's the alternative to PKI?
Certainly something a hell of a lot simpler then x509 - and without assumptions from the 1990s hardcoded into it
1 reply →
https://en.wikipedia.org/wiki/Decentralized_identifier
1 reply →
no alternative. just eliminate the thing not liked. it's called being DOGEd