Re: [Tails-dev] Removing SSL CA dependency for HTP

Delete this message

Reply to this message
Author: intrigeri
Date:  
To: proper
CC: The Tails public development discussion list
Subject: Re: [Tails-dev] Removing SSL CA dependency for HTP
proper@??? wrote (11 Jun 2012 18:10:24 GMT) :
> You might also use a hybrid system, with a mix of SSL and HS.


Thank you for the suggestion.

But then we would have to differentiate between the .onion (with no
SSL) and the non-.onion (with SSL + "strict" CA-based certificate
checking), which means additional implementation complexity for
a relatively small gain. I'm not sure I'd like us to go this way.