On Thu, Apr 16, 2015 at 5:16 AM, <david.a.p.ll...@gmail.com> wrote:

> - You don't want to hear about non-centralized security models.  DANE
> provides me with control over certificate pinning for people visiting my
> websites.
> ​[...] If you don't like DANE, explain why, and propose something else
> that is non-centralized and not under Mozilla's control.
>

​For certificate pinning Firefox and Chrome support the Public Key Pinning
Extension for HTTP (HPKP​
​), which is non-centralized, not under Mozilla's control, and was recently
ratified as a formal IETF internet standard​

https://tools.ietf.org/html/rfc7469
​
-
​Dan Veditz
_______________________________________________
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform

Reply via email to