4 ms·
The big question is does the emperor have any clothes? My guess is they'd settle for blocking certs issued after a specific date, at least for a transition per
by acveilleux 10y ago
The big question is does the emperor have any clothes?
My guess is they'd settle for blocking certs issued after a specific date, at least for a transition period. The alternative would block too much of the internet.
- MichaelGG 10y agoIf you really don't trust the CA, then you can't trust the issue date. At a minimum they could block EV certs from being honoured as EV which harms reputation and prevents a profitable line of business.
- prdonahue 10y agoTrust me, Google would take action almost immediately after realizing what happened (if this were to actually go down). Take a look at Ryan Sleevi's previous posts on Symantec: 1. https://security.googleblog.com/2015/10/sustaining-digital-certificate-security.html?m=1 https://security.googleblog.com/2015/10/sustaining-digital-c... 2. https://security.googleblog.com/2015/12/proactive-measures-in-digital.html?m=1 https://security.googleblog.com/2015/12/proactive-measures-i... Ryan takes egregious violations of the BRs quite seriously. The CAs cross Google at their own risk. One day you find you're not trusted in Chrome anymore and their goes your business.
- devishard 10y agoBlue Coat need only issue MITM certificates for one large client for a few days to both do a lot of damage and make a lot of money, and if that's their plan, what do they care if they aren't trusted in Chrome afterward?