As I understand it, it's basically it's a new way of handling certificate authorities for secure sites. Rather than just trusting the CA that signed the certificate, it probes the site from different servers around the world and compares the certificates it gets. If your computer gets a different certificate than the other servers, then somebody is probably trying a man in the middle attack on you and you'll know about it. If you decide that you don't trust one of the servers you are probing with, you can just drop it from your list.  Seems like a good idea.





http://convergence.io/
Long video of Moxie Marlinspike talking about SSL in general and Convergence.









 
 

Not a bad idea.
 

Thanks for this. I just installed it on FF 13 (Mac) and passed this info along to the local Linux Users Group (ColaLUG).