• interdimensionalmeme
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    1 month ago

    The certificate authorities on my ring that I trust. For normal people that’s already included in their OS or browser

    • NicolaHaskell@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      1
      ·
      1 month ago

      So, an authority? It sounds like this would complicate DNSSEC by requiring the “root keys” to be stored outside the DNS itself.

      • interdimensionalmeme
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 month ago

        We already have to have key rings. Centralized DNS is just a second, superfluous layer of authority (and a massive grift) on top