Hacker News new | past | comments | ask | show | jobs | submit login

Hopefully one day we will replace CAs with something decentralized(i.e based on DNSSEC). CAs make sense only if you need an EV certificate.



DNSSEC is not decentralized -- it follows a strict hierarchy from ICANN => TLDs (world governments) => you.

DNS is distributed, not decentralized.


Right... but at least you cut off the CA from the scheme. You depend on ICANN -> TLD anyway.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: