Comment

Dr_Satan@lemm.ee ⁨7⁩ ⁨months⁩ ago

Consider. We’re all using HTTPS and depending on certs.

Suddenly a wild threat appears.

For our own safety, from now on, certs will only be issued by those who get special permission from the gov.

Google will be cooperating in this.

It’s technically trivial after all, because we’re all already using HTTPS anyway. It’s just a matter of changing the lock on the gate.

Thank you for your cooperation in these troublesome times.

Sort:hotnew top

KingWizard@kbin.social ⁨7⁩ ⁨months⁩ ago
Your entire premise requires the cooperation of the entire world to collude and agree on something.

source
towerful@programming.dev ⁨7⁩ ⁨months⁩ ago
Nah, anyone can become a certificate authority.
The difference is that the current trusted certificate authorities are autonatically trusted by browsers and operating systems.

But you could run your own CA, issue certs for yourself and your friends, and get them to import your CA public key to their trusted CA store.
Then it would work just like getting a cert from letsencrypt. The only difference is that letsencrypt is already included the CA store of OSs and browsers, so people dont have to do all the manual stuff

source
udon@lemmy.world ⁨7⁩ ⁨months⁩ ago
@KingWizard is right, you don’t understand the fundamentals of this. You’re asking good questions, but people have been asking them decades ago and already found reasonably good answers. HTTPS works okay for what it does. Check out letsencrypt, watch some talks about it. Informing yourself about the matter will get you further than asking more random questions on lemmy.

source