Trust is Good. Verification is Better.
From May 25th to 28th, the 17th Gulaschprogrammiernacht (GPN) took place again at the ZKM and the HfG. For four days, there were lectures, workshops, extraordinary projects and, of course, Tschunk and Goulash. Many thanks to Entropia and all the helpers who made the event possible!
In his presentation "Trust is Good. Verification is Better."
, Andreas Sperber spoke about the trust problem in PKIs and presented solution approaches such as HTTP Public Key Pinning, Certificate Transparency and DANE.The topic of the presentation is current: as of September 2017, DNS Certification Authority Authorization (CAA) will be introduced as mandatory, and Google will also introduce Certificate Transparency as mandatory with its Chrome browser starting in October of this year. HTTP Public Key Pinning is an effective protection mechanism, but currently brings some hurdles. The aramido blog will report on these topics. Stay up to date and subscribe to the blog feed .
By the way, all presentations from the GPN are available at media.ccc.de.
