Comment

Comment on Reddit will block the Internet Archive

It’s important for people writing papers and such who need to cite material.

I wonder if there’s some way to use the TLS certificate to bootstrap a cryptographically-signed copy of a webpage with timestamp that someone could later validate as having been downloaded on that date. I don’t know if existing TLS libraries are capable of that. Like, Web browser menu option “Store cryptographically-signed webpage”. Absent a later certificate compromise, I’d think that that’d at least provide people a way to credibly say “this is really what was on that webpage on August 15th, 2026”.

source

Sort:hotnew top

TheNamlessGuy@lemmy.world ⁨22⁩ ⁨hours⁩ ago
I was going to say that the browser plugin SinglePage does this, but apparently they themselves don’t recommend it for archiving.

source
- tal@lemmy.today ⁨20⁩ ⁨hours⁩ ago
  Unfortunately, it’ll be more than that, as that’ll be saving the plaintext files transferred internal to the TLS connection. The information that would need to be saved will normally just be thrown out, as it’ll be the TLS connection itself.
  
  On second thought, though, I don’t think that it’d be viable, since the way that something like this normally works is to just use (slow) public key encryption to transfer a symmetric session key and to then use (fast) symmetric encryption on the bulk data, and once you have a copy of the session key, you could forge whatever you want with it. This would only work if you were using asymmetric encryption to encrypt the data in the connection.
  
  kagis
  
  www.cloudflare.com/…/what-is-a-session-key/
  
  What is a session key? Session keys and TLS handshakes
  
  The TLS (historically known as “SSL”) protocol uses both asymmetric/public key and symmetric cryptography, and new keys for symmetric encryption have to be generated for each communication session. Such keys are called “session keys.”
  
  Yeah. Oh, well. It was a happy thought for a moment.
  
  source