4 ms·

I don’t know much about how the CA system works, but “there’s something fishy going on with this CA” in conjunction with “starting with June 1st 2016” is not ve

• SolarNet 11y ago
  Well the CA in question represents a large market share of both internet and non-internet certs. You can't just top trusting them, large parts of the internet would crash and burn.
  • bigiain 11y ago
    And until that happens, why do we expect and significant portion of Symantec's customers to care? And unless they care, why would Symantec? Apple are using a Symantec ssl cert right now: "The identity of Apple Inc. at Cupertino, California US has been verified by Symantec Class 3 EV SSL CA - G3. Valid Certificate Transparency information was supplied by the server." But their level of give-a-shit is clearly demonstrated as well: "Your connection to www.apple.com is encrypted using an obsolete cipher suite. The connection uses TLS 1.2."
• politician 11y ago
  You can revoke their certificates from your root trust stores yourself on most devices.
  • kevinchen 11y ago
    Scrolling through the two PDFs linked from the post, looks like we would have to stop trusting Symantec, Thawte, VeriSign, GeoTrust, and probably a few others. Is that right?