On: How to distrust a CA without any certificate errors

[tptacek]

Well, I will give you this: this is a novel take. The WebPKI and DANE, because, heck, it's all compromised anyways.

Personally: I'm for anything that takes leverage away from the CAs.

[cryptonector → tptacek]

Well, it's u/LegionMammal978's novel take, I just riffed on it.

> Personally: I'm for anything that takes leverage away from the CAs.

You can automate trusted third parties all you want, but in the end you'll have trusted third parties one way or another (trust meshes still have third parties), and there. will. be. humans. involved.