3 ms·
Even after this disclosures, a fully informed, rational agent would still choose WoSign if their price and service were the best. This is because WoSign's behav
by lolc 10y ago
Even after this disclosures, a fully informed, rational agent would still choose WoSign if their price and service were the best. This is because WoSign's behavior does not specifically endanger their customers.
The SSL ecosystem relies on the trustworthiness of the certificate authorities. If one of them is compromised, the whole system is compromised, not just their customers. This cannot be solved by markets. Instead, it's heavily regulated.
- michaelt 10y agoWoSign's behavior does not specifically endanger their customers. Or more precisely, problems such as issue N [1] endanger their customers, but endanger non-customers just as much. [1] https://wiki.mozilla.org/CA:WoSign_Issues#Issue_N:_Additional_Domain_Errors_.28June_2015.29 https://wiki.mozilla.org/CA:WoSign_Issues#Issue_N:_Additiona...