3 ms·
A clear example of too big to fail. If this was any smaller CA (like cnnic before), they would now be gone from the trusted roots. I wonder what's coming out o
by pilif 11y ago
A clear example of too big to fail. If this was any smaller CA (like cnnic before), they would now be gone from the trusted roots.
I wonder what's coming out of this. Personally, I think Symantec doesn't care in the least about Google's sabre rattling here. It's clear to everybody that Google hardly wants to release a browser which doesn't display 50% of the encrypted web sites.
This is a further issue with the current PKI: too few CAs are around (after symantecs buying spree lately) which gives them way too much power to do what ever they want. Furthermore, the process of acquiring a certificate (especially an EV one) makes switching CAs very burdensome, so not even bad reputation will compel people to leave.
What a mess.
- serendipitous 11y agoSymantec already agreed to start using Certificate Transparency in the near future, as per Google's request. This is a good thing.