moxie0 / Convergence

An agile, distributed, and secure alternative to the Certificate Authority system.
http://convergence.io
623 stars 127 forks source link

Generalize Google verifier to DNS verifier. #163

Closed mavam closed 5 years ago

mavam commented 11 years ago

Google's Certificate Catalog seems to be defunct. This commit replaces the Google-specific Verifier with a more generic DNS-based verifier. From a user perspective, one can now provide the DNS hostname of the verifier to use on the command line, e.g.:

convergence-notary.py -b dns:your.catalog.here.com

The DNS catalog must accept TXT lookups for hashes, such as:

1956DC8A7DFB2A5A56934DA09778E3A11023358.your.notary.here.com

Answers should be compatbile to Google Certificate catalog API.