Hacker News new | ask | show | jobs
by wp381640 2526 days ago
> It’s a central authority that either says “yes it’s real” or not.

/me looks at his browser CA roots

2 comments

Browser uses cryptography, so one does not have to contact CA for every visit.

Banksy does not, so you do have to contact “CA” every time.

That’s right, the CA certificates in your browser can be tampered with because they aren’t the actual CA saying “yes it’s legit” they are a token containing a cryptographic key which claims to prove authenticity mathematically.

Banksy is more secure than web browser crypto.