Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

So a decade from now or so we'll reach the point of every request having its own cert?


There still is Kerberos. It has the advantage that it can run exclusively on top of symmetric encryption. You wouldn't get a key per request, but rather a shared secret for every user/service combination.

In case there is a cryptographic breakthrough and we can't be sure we can do asymmetric cryptography securely anymore, we'd have to switch to something like that anyway.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: