Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> not prescriptive about what certificate authorities

This seems like a non-sequitur. DoH does not specify particular certificate authorities; it just uses a secure connection, rather than plaintext DNS.

Is your complaint specifically about certificate pinning in proprietary applications, as opposed to using the system CA store?

> twisty rhetorical maze

That is an excessively reductive description of an argument you disagree with.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: