4 ms·
just listen to security now [0]. it'll make your blood boil how, e.g., symantec fucks up over and over again. this industry is full of incompetent idiots. [0]
by glasz 11y ago
just listen to security now [0]. it'll make your blood boil how, e.g., symantec fucks up over and over again. this industry is full of incompetent idiots.
[0] https://twit.tv/shows/security-now https://twit.tv/shows/security-now
(episode 532 is particularly revealing)
- zbuf 11y agoThanks, interesting to hear. If I heard correctly this is a case of incompetence -- which is certainly a problem. Though the information I heard was about lesser-known CAs granting certificates to enable some kind of snooping. It seems that a problem with the current implementation of SSL is that it conflates the requirement for encryption with that for identification. Knowing that "Symantec thinks this is google.com" has limited benefit to me; I'm happier with the idea that "This is the same google.com you visited before".