|
|
|
|
|
|
by procombo
2373 days ago
|
|
|
I've always wondered a similar thing... why is reputation-based TLD network security limited to a single verification entity (CA w/ revocation policy)? Seems obvious to me certs should be signed (and thus revokable) from multiple entities by default. I've implemented this before in clients ad-hoc, but why isn't it default? Don't get me started on authoritative DNS security. |
|
|