3 ms·
Trust me, Google would take action almost immediately after realizing what happened (if this were to actually go down). Take a look at Ryan Sleevi's previous po
by prdonahue 10y ago
Trust me, Google would take action almost immediately after realizing what happened (if this were to actually go down). Take a look at Ryan Sleevi's previous posts on Symantec:
1. https://security.googleblog.com/2015/10/sustaining-digital-certificate-security.html?m=1 https://security.googleblog.com/2015/10/sustaining-digital-c...
2.
https://security.googleblog.com/2015/12/proactive-measures-in-digital.html?m=1 https://security.googleblog.com/2015/12/proactive-measures-i...
Ryan takes egregious violations of the BRs quite seriously. The CAs cross Google at their own risk. One day you find you're not trusted in Chrome anymore and their goes your business.
- devishard 10y agoBlue Coat need only issue MITM certificates for one large client for a few days to both do a lot of damage and make a lot of money, and if that's their plan, what do they care if they aren't trusted in Chrome afterward?