Certificate authorities are a really convoluted way for browser vendors to maintain control over DNS. We could have easily ended up in a world where this was all handled by dnssec.
All while claiming DNS “isn’t in their security model” (yes, that’s what tls people keep saying…)
Please Login to reply.
No replies yet.
