4 ms·
One could say it's a backdoor in certificate validation.
by revelation 10y ago
One could say it's a backdoor in certificate validation.
- Dylan16807 10y agoI wouldn't call it a backdoor because it's such a simple and obvious bug, in no way hidden or obfuscated. It's just an utter catastrophe of design, to check the name on the certificate instead of the signature.
- satysin 10y agoYeah that is exactly what they want you to think! "Oh it can't be a backdoor as it was so obvious it was just a mistake". Hmmmmmmm.
- Dylan16807 10y agoEven if it's intentional, at some point of obviousness it starts being a front door. They already have multiple backdoors and they have a proven history of poor implementation.