| ▲ | tptacek 8 hours ago | |
No, I think that state-controlled naming authorities shouldn't control cryptographic keys, for the reasons laid out on this and numerous other threads about DANE. You know you're in trouble when you see people talking about "bullying" from the browsers, who are the only reason we have certificate transparency and don't have CAs literally selling root certificates to big companies to run their own private CAs. | ||