Replying to Avatar Nuh

I desperately need people to understand that data doesn't need to be signed (be self-authenticated) if you download it from the authoritative source and you trust the DNS and e2ee between you.

If you don't have gossip infrastructure (and demand) in place, signed data is dead weight and larping.
Avatar
the axiom 1y ago

but you need every person to run their own https server publicly accessible at all times?

Reply to this note

Please Login to reply.

Discussion

Avatar
Nuh 1y ago

No, they can delegate, web hosting have been a thing since forever.

are we going to pretend we can't trust servers that we are already in a trust relationship with to not fake our data?

Not everything needs to be that extreme, life is built on trust, as long as I can always fire a misbehaving server.