Back

@tdelmas Nice + yep, we could have an EU-based provider and regulate so that browsers must accept them.

And have it work with OpenNIC so we can decouple domain names from the artificial scarcity of the commercial ICAAN.

@tdelmas Good shout. Yes. And what’s the use of a standard if there aren’t multiple implementations?

@nick @tdelmas me too

@celeduc @tdelmas I'm curious about what we could do next here; Tom's repo is a good overview, but the hard part is organising and getting accepted into the certificate stores. But at least we'd not need to pave the way completely from scratch! What do you think?

@nick @celeduc

The first step would be to create a non-profit structure.

Then set up the infrastructure.

Once the structure and the infrastructure is strong, then comes the "getting accepted into certificate stores", which is a multi-year-long process, that needs to be bootstrapped by a cross-signature from an already accepted CA. Maybe @letsencrypt could help for that (or a commercial CA for a fee).

@tdelmas @celeduc The cross-signing is an interesting point I'd not considered — is there anything else where you'd need cross collaboration?

The rest is — pleasently — quite conventional stuff. But it needs funding, which is tricky.

@nick @celeduc You need some collaboration for the inclusion in trust stores and CT logs.

@tdelmas @celeduc Ah yeah, nice.

@reynir @aral I am, but I am not aware of any non-profit one.

protocol AND governance

@tdelmas @reynir @aral