3 ms·
Eventually, once the roots are trusted natively in enough systems, dropping the cross-signed root, making handshakes smaller and path-building simpler. Also som
by FiloSottile 11y ago
Eventually, once the roots are trusted natively in enough systems, dropping the cross-signed root, making handshakes smaller and path-building simpler. Also some of their roots are stronger than the cross-signer, so when/if the cross-signer becomes too weak and gets dropped, the better Amazon roots will stay.
And I guess being a first class citizen of the CA space, which is good because it brings audits, participation and accountability.
- vtlynch 11y ago>And I guess being a first class citizen of the CA space, which is good because it brings audits, participation and accountability. Just to clarify on your last point. If Amazon wants to issue certificates it has to conform to industry regulations and undergo audits regardless of if its using another companies' roots.