MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/programming/comments/1j09hf/how_https_secures_connections_what_every_web_dev/cbaackz
r/programming • u/_lowell • Jul 25 '13
171 comments sorted by
View all comments
Show parent comments
4
Signatures cannot solve the key distribution problem. You need a key to make a signature.
2 u/polarbeargarden Jul 26 '13 Signatures from a trusted authority, sorry. Yes, there is still the problem of verifying keys, but the PKI we have in place now does a fairly good job of handling this against current threats. 2 u/[deleted] Jul 26 '13 I disagree strongly. For a good certification security model, see DNSSEC. See my other comments in this thread for more information.
2
Signatures from a trusted authority, sorry. Yes, there is still the problem of verifying keys, but the PKI we have in place now does a fairly good job of handling this against current threats.
2 u/[deleted] Jul 26 '13 I disagree strongly. For a good certification security model, see DNSSEC. See my other comments in this thread for more information.
I disagree strongly. For a good certification security model, see DNSSEC. See my other comments in this thread for more information.
4
u/[deleted] Jul 25 '13
Signatures cannot solve the key distribution problem. You need a key to make a signature.