Daniel Micay on Twitter: "@spudowiar It's how nearly everything works, and even systems like Domain Validation certificates are basically just delegated TOFU. We not only trust all these CAs but also rely on an attacker not doing a MITM of the initial verification by the CA, with only CAA as a way to mitigate that." / Twitter

This Tweet was deleted by the Tweet author. Learn more

Replying to

and

The possibility of a Twitter account or Twitter itself being compromised doesn't imply that it is *currently* compromised already. There's a lot of value in Trust On First Use systems.

Replying to

and

It's how nearly everything works, and even systems like Domain Validation certificates are basically just delegated TOFU. We not only trust all these CAs but also rely on an attacker not doing a MITM of the initial verification by the CA, with only CAA as a way to mitigate that.

7:35 PM · Nov 1, 2018Twitter Web Client

Conversation