4 ms·
The browsers will distrust the CA. Which will, in all likelyhood, lead to their bankruptcy.
by gcp 10y ago
The browsers will distrust the CA. Which will, in all likelyhood, lead to their bankruptcy.
- voltagex_ 10y agoWill they? Still gotta wait for Google, Microsoft and Apple. Is there any mechanism to push certificate updates to Android devices in the wild? Otherwise there's going to be a lot of devices that trust WoSign and StartCom, no matter what.
- johncolanduoni 10y agoChrome doesn't have their own certificate store, instead they use the platform's certificate store with some logic layered on top (e.g. requiring new Symantec certificates to be in the certificate transparency logs). So an update to the Chrome app on Android could implement Mozilla's plan, or something even more extreme.
- vertex-four 10y agoIn practice, nobody is going to buy a cert for general web use which doesn't work for Firefox. They could scale back drastically and focus on internal certs and certs for other uses, but that might not be enough to keep them afloat, especially with the reputation damage from this.