HN
Hacker News
Top
New
Best
Ask
Show
Jobs
Comment by bmh_ca | Hacker News Reader
Full thread
bmh_ca
·
Automated HSTS, revokable public key pins, and certificate transparency.
View on HN
sofaofthedamned
·
Agreed, but I'd add ipv6
dane-pgp
·
Agreed, but to those 4 things I'd add DANE TLSA (RFC 6698) and Certification Authority Authorization (CAA) (RFC 6844) as further lines of defence against rogue CAs.
Reply on news.ycombinator.com