Timeline for Is there a method/protocol to validate a self-signed certificate by comparing a shortened hash?
Current License: CC BY-SA 3.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 21, 2016 at 20:29 | history | edited | tum_ | CC BY-SA 3.0 |
added 7 characters in body
|
| Jun 21, 2016 at 15:57 | comment | added | Maarten Bodewes♦ | I just mentioned it here because it can obviously be combined with option #1 and #2. | |
| Jun 21, 2016 at 15:57 | comment | added | tum_ | @MaartenBodewes "Using just the 16 leftmost bytes of the hash" was the idea #0 ;) (or rightmost, or every odd, etc.) but - now we come to the need of assessing the security strength, which is the field I deliberately avoid leaving it to experts. | |
| Jun 21, 2016 at 15:18 | comment | added | Maarten Bodewes♦ | Idea #2 basically would come down to performing base 32 or 64 encoding (or similar) instead of encoding to hexadecimals. I'm not sure it would bring down the number of characters enough to be worth while. Using just the 16 leftmost bytes of the hash on the other hand could be a good balance between security and practical communication of the hash. | |
| Jun 21, 2016 at 14:42 | history | edited | tum_ | CC BY-SA 3.0 |
added 201 characters in body
|
| Jun 21, 2016 at 14:38 | comment | added | tum_ | @MaartenBodewes Even better, then. I'll edit my answer accordingly. To show off a bit ;): I genuinely coined this idea on my way from a smoking break to the office but, while I was typing it, I thought that this field just must be well-developed because it has so many applications in our modern life.... Thanks for upvoting. | |
| Jun 21, 2016 at 14:29 | comment | added | Maarten Bodewes♦ | Au contrare, human interaction with cryptographic protocols is an active topic in my opinion. I think PGP uses a similar scheme for key fingerprinting. | |
| Jun 21, 2016 at 14:00 | history | answered | tum_ | CC BY-SA 3.0 |