10 ms·
> How do we (or Google) know that the CIA and FBI can't create certificates from all the CAs because they have stolen/demanded the Root CA for them? Certificat
by lima 10y ago
> How do we (or Google) know that the CIA and FBI can't create certificates from all the CAs because they have stolen/demanded the Root CA for them?
Certificate Transparency.
- zabuni 10y agoWhich is why Google knew that someone issues a cert for their website: https://security.googleblog.com/2015/09/improved-digital-certificate-security.html https://security.googleblog.com/2015/09/improved-digital-cer... Might be part of the reason they are becoming their own CA.