10 ms·
Yes - I thought this was a cryptographic breakthrough, but it's just people breaking promises.
by billybob 17y ago
Yes - I thought this was a cryptographic breakthrough, but it's just people breaking promises.
- orangecat 17y agoThat, and it demonstrates how bad the default SSL trust model is. If the gmail.com certificate came from Thawte yesterday and comes from the Department of Defense or CNNIC today, your browser will happily accept it without warning.