Systems that rely on trusted authorities can be compromised with low cost (case in point: SSL/TLS). Panvala solves this problem by decentralizing trust through a token-curated registry.https://twitter.com/PanvalaMark/status/1016337610787180545 …
-
But as we all know, there's never a 100% guarantee. The TCR reflects the opinion of the security community as a whole (hopefully including
@TrailofBits). Consumer reports is a good analogy.
Consumer Reports tells you "We like it" or "It works", not "It withstands sustained, active attack." UL is closer, though they also do not incorporate adversary-induced failure cases in their certifications afaik.
-
-
Thinking about it more, I think the closest analogy is PCI Compliance.
-
The wording and exact specification for the mark(s) will need some fine-tuning. Perhaps "compliant" or "approved" might be more fitting than "safe"?
- 1 more reply
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.