Author: Tier Nolan 2014-01-03 11:22:35
Published on: 2014-01-03T11:22:35+00:00
The need for cryptography to be integrated with mainstream use has been highlighted several times by renowned figures. The issue is that it needs to be trustworthy and automatic, otherwise, there are many attack vectors. The idea of manually checking the hash of a download is not practical for most users. A suggestion was made to add a secure downloader to the Bitcoin client, where the download link points to a metadata file with information on the download. It would suffer from the root CA problem, but at least it would provide forward security. It could also be used to download files for different projects, with explicit warnings that a new trusted key is being added. When downloading, a window would appear with confirmation options. However, each trusted key would only be linked to a specific project, and it would indicate if the project or leader is unknown.
Updated on: 2023-06-07T22:00:06.762236+00:00