Title: Yet another alt-coin - but to replace digital certificates Post by: Septic on December 11, 2013, 09:30:07 PM Reading yet another issue with a certificate authority recently (in this case, a French agency being able to masquerade as Google for a MITM attack: http://arstechnica.com/security/2013/12/french-agency-caught-minting-ssl-certificates-impersonating-google/ (http://arstechnica.com/security/2013/12/french-agency-caught-minting-ssl-certificates-impersonating-google/)), I thought about suitable alternatives for protecting privacy and ensuring validity, perhaps in a similar aspect to namecoin.
Essentially, the network itself can act as the Web of Trust; all the clients can have all the knowledge of every 'registered' (tbd) site, existing transaction histories serve instead to validate the domain/site has not been transferred to another party, and nobody can sweet-talk/hack a company into providing an illegitimate certificate. Before I start contemplating the idea too deeply, is there general interest/critical flaws in regards to this? I can think of quite a few issues without thinking too much:
Interested to hear your opinions ;) And feel free to tell me the idea actually sucks ::) Title: Re: Yet another alt-coin - but to replace digital certificates Post by: pmconrad on December 11, 2013, 09:45:59 PM Actually namecoin is pretty much doing what you want:
http://dot-bit.org/forum/viewtopic.php?f=5&t=1396 Title: Re: Yet another alt-coin - but to replace digital certificates Post by: Septic on December 12, 2013, 11:51:55 PM Looks like I need to look into namecoin a bit deeper!
|