Tim,

Sounds reasonable. One question is that since it is not widely used, does it 
meet the 0.1 percent of connections criteria? I don't know how we measure that.

Bruce.

From: [email protected] [mailto:[email protected]] On Behalf Of Tim 
Moses
Sent: Friday, September 13, 2013 4:28 PM
To: [email protected]
Subject: [wpkops] Cert-pinning, CA-pinning part of trust model: suggestion

Inigo/Bruce - Should certificate-pinning and CA-pinning be considered a part of 
the trust model?  It was, after all, the way in which the DigiNotar failure was 
discovered.  Just a suggestion.  All the best.  Tim.
_______________________________________________
wpkops mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/wpkops

Reply via email to