Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If you are trusting a user since they are the same one that originally contacted you, you don't. It's tofu


I can't believe this was downvoted. Seriously a Certificate is binding a public key and the attributes (mainly the identity). If you don't need to use the attributes, you don't need a certificate!




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: