Comment by ycombinatrix

2 days ago

https://en.wikipedia.org/wiki/Convergence_(SSL)

shame it wasn't adopted. rent seeking CAs would never go for it.

2 comments

ycombinatrix

Reply
cowlevel  2 days ago

Actually it sounds too complicated for users. It's basically doing web of trust.

  • ycombinatrix  2 days ago

    Web of trust required a lot of work by users and was pretty bad in practice. This isn't that.

    This would effectively be the same "root CAs come pre-installed" but they would be notaries rather than root CAs, with a predefined trust policy (maybe minimum of 2 notaries per leaf certificate)

    Users would still just see a green lock icon same as before, no action needed.