3 ms·
CAs need irreproachable reputations, anything less is absurd, like trusting your bank manager even though you know they have a gambling problem and owe money to
by angry_octet 10y ago
CAs need irreproachable reputations, anything less is absurd, like trusting your bank manager even though you know they have a gambling problem and owe money to Fat Tony. Having sympathy for their commercial corcerns is absurd.
The better solution would be to alert on all of their certs as being 'low trust'. A first step towards explicit trust belief, where reputations build slowly over time and can be severly damaged by bad behavior.
- tptacek 10y agoHow is that solution better than effectively putting them out of business?
- angry_octet 10y agoBecause of the many certs already issued and in use for ecommerce (lovely 90's word!). This will encourage those users to move to new CAs without causing breakage. If we could move towards certs signed by multiple CAs that would be good too.