Hacker News Reader

Hm, how does this work with that iOS always run browsers using Safari webview?

Doesn't this need a native browser implementation for the handshake and p2p to be secure?

It uses WKNavigationDelegate[0] it allows responding to authentication challenges by accepting/rejecting certificates or continuing with default handling. This is used to do certificate pinning. DS records are stored on chain and requested via the P2P client. The DS record is used to verify DNSSEC and to obtain a certificate hash/TLSA record.

[0] https://developer.apple.com/documentation/webkit/wknavigatio...

Thanks for the explanation!

Reply on news.ycombinator.com