Conversation
Twinspin 
twinspin6@outerheaven.club
maybe we ought to have something better than the current ca situation
1
1
1
Chjara ☭ ⍼ 
chjara@akko.tuxcrafting.xyz
@snacks @twinspin6 Just pipe your traffic directly through the CIA instead of needing them to MitM the network yeah
1
0
2
amenome
anemone@ebiverse.social
1
0
1
0
0
1
@anemone @twinspin6 you can't run a site that doesn't fit to the private key, so as long as you connect to the correct address you know you're not connected to an impostor
2
0
1
@anemone @twinspin6 well, unless they stole the private key but that's the same but as with cas
1
0
1
Twinspin
twinspin6@outerheaven.club
0
0
0
amenome
anemone@ebiverse.social
@snacks@netzsphaere.xyz @twinspin6@outerheaven.club Couldn't you accomplish the same thing by everyone just using self-signed certificates that you manually trust?
1
0
1
@anemone @twinspin6 no, even with tofu pinning you could be talking to an impostor on first connection
2
0
1
amenome
anemone@ebiverse.social
@snacks@netzsphaere.xyz @twinspin6@outerheaven.club i do not see how this is practically better then typing the public key into your address bar like tor. You could get the certificate from a trusted third party which is no different from getting the onion address from a trusted third party
0
0
1