3 ms·
Because it doesn't settle with having as many single points of failure as the number of CA entries in your root CA list, they are getting multiplied over and ov
by Natanael_L 11y ago
Because it doesn't settle with having as many single points of failure as the number of CA entries in your root CA list, they are getting multiplied over and over.
- MichaelGG 11y agoHow would it be any different if these CA's made a choice to instead issue end-user certs but based off of Let's Encrypt's authorization?
- Natanael_L 11y agoFewer master keys to target
- MichaelGG 11y agoI'm gonna guess that getting into Let's Encrypt's HSM is as hard or harder than breaking their auth procedures.