You're looking at Less Wrong's discussion board. This includes all posts, including those that haven't been promoted to the front page yet. For more information, see About Less Wrong.

Pfft comments on Open thread, Feb. 9 - Feb. 15, 2015 - Less Wrong Discussion

6 Post author: MrMind 09 February 2015 09:12AM

You are viewing a comment permalink. View the original post to see all comments and the full post content.

Comments (321)

You are viewing a single comment's thread. Show more comments above.

Comment author: Pfft 11 February 2015 10:16:19PM *  2 points [-]

Hm, reading up a bit about SSL/TLS, it seems this will not work. Apparently it uses a Message Authentication Code to ensure authenticity, not a signature. But that means that even if you have all the data sent by the server, you still can't prove to a third party that you didn't modify it.

I'm not sure, but possibly you could prove that you did an SSL handshake with the server at a given time, so you can prove that the server sent "something", but not necessarily the particular thing you have. :)