Hacker News Reader

he's not wrong about SSL being poor.. rather, the CA system is what I consider to be poor.

there was the idea of notaries that never took off, but that would be ideal imho.

yes notaries + alternative DNS. problem is really the root (literally). its the same thing: somebody running a server and making decisions based on profit/power what goes into that server. I mean you choose whether you go to GoDaddy or Comodo, but that's about it. with .com you don't even have a choice but verisign. DNSsec add insult to injury, by making domain regs the CA's. and this 'proposal' is really the height of absurdity. AT&T shouldn't be writing the trust protocols.

Reply on news.ycombinator.com