It looks like some issues may arise if/when an instance's domain name changes. Is there any way we can change federation so that we don't need to rely on such a central point of failure?

you are viewing a single comment's thread
view the rest of the comments

[–] gammaray@sh.itjust.works [S] 3 points 9 months ago (1 child)

I was also considering something along the lines of option 3. I'm not sure of a foolproof solution, even DNS has the potential for imposters and being revoked.

permalink

fedilink

source

parent

hideshow 1 child comment

[–] lambalicious@lemmy.sdf.org 5 points 9 months ago

Yeah, the weakness of SSL is basically the same as the weakness of DNS: that someone can remotely impersonate you or revoke your identity. But there is a major difference: DNS is designed so that your identity is taken away as part of the system: you can not ever declare your identity yourself, you have to rent it from an external entity controlled by corporate, government or both. Whereas in SSL if your identity is taken away for the most part it's purely your fault (only you should be having your private keys).

permalink

fedilink

source

parent