|
|
|
|
|
|
by MiWDesktopHack
4046 days ago
|
|
|
Hiya, This seems somewhat related to some work I did last year on using blockchain to 'register' and provide distributed revocation of certs.
I called it UTXOC or Unspent Transaction Output based Certificates https://github.com/MiWCryptoCurrency/UTXOC/
Specifically, I called 'self-signed' certs 'Cryptocurrency Bonds' and could be revoked by spending the funds associated with a public key (bitcoin-like address), and others could verify this by inspection of the blockchain. The difference here is that I was using the cert privkey as as the bitcoin privkey; Problem being that modern browsers don't and likely never will support the secp256k1 curve for EC keys in TLS.
I did built a custom NSS+Firefox that did, and it worked, so it is possible.
In fact, NSS used to support the full range of EC curves until 2005.
https://raw.githubusercontent.com/MiWCryptoCurrency/Certific... Would be great to discuss your thoughts on using blockchain for x509 and trusts. |
|
|
