4 ms·
If a CA is compelled to issue a false certificate by court order, this destroys their credibility completely. If I ran a CA, I'd rather face the consequences, a
by bkudria 17y ago
If a CA is compelled to issue a false certificate by court order, this destroys their credibility completely. If I ran a CA, I'd rather face the consequences, and let the court ask another listed CA, rather than destroy my entire business model.
- tptacek 17y agoWatch what happens when we find out which CA's did this. My money is on "they do not go out of business". Give it a few months.
- olefoo 17y agoEspecially with Americans new found willingness to accept overreaching law enforcement measures. So long as one of the right trigger words (terrorism, children) is used, the average purchaser of certificates won't blink at the idea that law enforcement completely subverted the chain of trust that enables their customers to believe they are dealing with who it says on the certificate.
- ars 17y agoCourt order? Your argument might make sense if it was law enforcement making the request. But do you really think companies should ignore court orders?
- DavidSJ 17y agoCan a court order you to commit a fraud?
- briansmith 17y agoThere's a difference between fighting court orders and ignoring court orders.
- mbreese 17y agoCAs must be audited and have a certification to be accepted in the major browsers (something like WebTrust). If anyone did this, they would lose that certification immediately and then they'd be out of business because their root CA would be revoked from Windows/Firefox/Mac OS. The question is how WebTrust would treat this type of theoretical issue.