Some recent announcements regarding ssl and the insecurity surrounding it have got me thinking about what could be a better solution.

Why can’t we generate ssl certs similar to the way that bitcoin prevents the bits from being double spent? Which happens to be similar to how Tor anonymizes your web traffic.

We could have one single ssl certificate authority that was completely open source and distributed. Anyone who wanted could fire up an ssl certificate server.

Every ssl certificate server on the network would have the complete history of every ssl cert ever issued. As long as n% of the servers have the same records we agree that the system is secure.

Possible?

No tags