7,326 karma · joined December 7, 2017
What if, for example, a three-letter agency seized keys from Intel, served them with a gag order to prohibit disclosure of the seizure, put themselves in the middle of the network path between you and the user, and modified the server software to send falsified signatures derived from those seized keys?
Better? No, almost never. Cheaper? Sometimes, especially in DCs that charge ridiculous MRCs for cross-connects. For a small/personal ASN, it can be the right choice.
What about TIPS and I bonds?
Yes - Sec. 8(c) establishes the right of a debanked person to take civil action (and recover attorney's fees) against the offending bank. https://www.congress.gov/bill/119th-congress/house-bill/987/...
https://www.congress.gov/bill/119th-congress/house-bill/987/...
https://www.congress.gov/bill/119th-congress/senate-bill/401...
I don't see a basis for the assertion by the resistbot letter that it could "force banks to cut off services to" "marginalized communities". It actually appears to do the opposite - banks that cut off services to law-abiding people would lose their access to the Fed lending window.
Example OpenBSD /etc/acme-client.conf:
authority buypass {
api url "https://api.buypass.com/acme/directory"
account key "/etc/acme/buypass-privkey.pem"
contact "mailto:youremail@example.com"
}
domain example.com {
domain key "/etc/ssl/private/example.com.key"
domain full chain certificate "/etc/ssl/example.com.pem"
sign with buypass
}Not necessarily. See "Discussion of Guy Fawkes signatures to protect some current bitcoins against quantum theft" and "Commit/reveal function for post-quantum recovery of insecure bitcoins" sections of the Optech page.