[144460] in North American Network Operators' Group
Re: Why are we still using the CA model? (Re: Microsoft deems all
daemon@ATHENA.MIT.EDU (Michael Thomas)
Mon Sep 12 11:25:25 2011
Date: Mon, 12 Sep 2011 08:24:32 -0700
From: Michael Thomas <mike@mtcc.com>
To: Martin Millnert <millnert@gmail.com>
In-Reply-To: <CAHyNd17W1UORzGTDAwM9jTgB30FZfhJ-TWNajiFn=sLNJ7OT0g@mail.gmail.com>
Cc: North American Network Operators' Group <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Martin Millnert wrote:
> On Mon, Sep 12, 2011 at 5:09 PM, Michael Thomas <mike@mtcc.com> wrote:
>> And how long would it be before browsers allowed self-signed-but-ok'ed-using-dnssec-protected-cert-hashes?
>
> As previously mentioned, Chrome >= v14 already does.
The perils of coming in late in a thread :)
Mike