Re: [TLS] TLS, PKI,

[Robert Relyea <[e-mail]>]

On 07/13/2010 05:06 PM, Martin Rex wrote:
> Robert Relyea wrote:
>   
>> It seems these are complaining about yesterday's UI. Most browsers no
>> longer use pop-up menus. You have to be quite aggressive to get through
>> the current screens.
>>
>> The real problem, of course, is those sites that don't have valid certs.
>> Continuing to ratched down the ability to get to those sites is good for
>> the internet as a whole. Sites with invalid certs are just as dangerous
>> for the internet as MITM sites.
>>     
>
> If SSHv1 would have required CA-signed X.509 certs in its initial
> shipment, it would have taken MUCH longer to become popular, if at all.
>   
Compared to SSL, SSH is still not popular, which sort of negates your point.

SSL is designed to allow you to make secure connections for the masses.
>
> -Martin
>