paragon_init
Joined 11 years ago
Karma
187
Submissions
99
Member since
May 29
Recent submissions
Comment · 2 years ago
> * I shouldn't have to care where the certificates are stored. Just load the os default ones without asking me.
> * I shouldn't have to know what a pem is, and I shouldn't have to open() one.
Agreed, but what you're requesting is separate from the work being discussed in this blog post, and both are actually compatible.
For the PHP community, we made Certainty - https://github.com/paragonie/certainty
You can just...
<?php
use ParagonIE\Certainty\RemoteFetch;
// cURL boilerplate
$ch = curl_init();
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
// Fetch the latest CACert bundle, verify its authenticity, save it locally
$fetcher = new RemoteFetch('/path/to/certainty/data');
$latestCACertBundle = $fetcher->getLatestBundle();
curl_setopt($ch, CURLOPT_CAINFO, $latestCACertBundle->getFilePath());
For Python specifically, there may be some value in storing the relevant PEM files into something like SigStore. That could be an easier proposal for the PyCA team to consider.
Comment · 10 years ago
Hi Zooko,
Has there been any serious discussion about incorporating the results of PQCRYPTO in your protocol so Zcash is still secure and viable (at >= 2^128 security level) after the development of practical quantum computers?
We offer these professional services to businesses:
https://twitter.com/ParagonIEhttps://github.com/paragonie
https://facebook.com/paragonie
[ my public key: https://keybase.io/paragonie; my proof: https://keybase.io/paragonie/sigs/93apsjubyvxgJAVQnZ-1O-6uzM6FYuc6en1QMeVuENQ ]