Conversation

Notices

1. Christopher Lemmer Webber (cwebber@octodon.social)'s status on Thursday, 31-Jan-2019 23:24:10 JST Christopher Lemmer Webber

   • Sebastian Lasse, redaktor.me

   If Brexit happens, every brit with a .eu domain will probably lose it [german article, via @sl007] https://www.heise.de/newsticker/meldung/Brexit-eu-Domaininhabern-drohen-Komplikationen-4294380.html

   Oh hi yes hello, have we talked yet about why DNS is bad and we shouldn't be relying on it for our decentralized networks?

   • Masanori Ogino ???? repeated this.
   • Christopher Lemmer Webber (cwebber@octodon.social)'s status on Friday, 01-Feb-2019 02:29:42 JST Christopher Lemmer Webber

     in reply to

     BTW, here is another way to put it, since I think many people here haven't thought about how problematic DNS / SSL CAs are:

     1) With DNS, you DO NOT own/control your domain; you lease/rent it. And your landlord can take it away at any time (and this does happen).

     (cotd ...)

     Masanori Ogino ???? repeated this.
   • Christopher Lemmer Webber (cwebber@octodon.social)'s status on Friday, 01-Feb-2019 02:32:54 JST Christopher Lemmer Webber

     in reply to

     2) The reason DNS/SSL are so hard is *because* of the coordination with central authorities.
     3) If your address was your key fingerprint, no need for a CA; you already know how to make a secure connection (why .onion does not need https)
     4) SSL CAs are as weak as the *weakest* CA in your CA list. It only takes one badly acting CA for you to be man in the middled.
     5) DNS and SSL CAs centralize the otherwise decentralized fediverse.

     Down with DNS, down with SSL CA cartels.

     Masanori Ogino ???? repeated this.
   • Federated Republic of Sean (freakazoid@retro.social)'s status on Friday, 01-Feb-2019 02:35:16 JST Federated Republic of Sean

     in reply to

     @cwebber I have some ideas for superseding keys in the case of revocation, upgrade, etc.

     Masanori Ogino ???? repeated this.