2 ms·
No real problem with Google running their own CA, but can't help but to think that the same people who provide the browser, the search engine and the OS, now al
by andmarios 10y ago
No real problem with Google running their own CA, but can't help but to think that the same people who provide the browser, the search engine and the OS, now also provide the certificates on who and what to trust.
As much as we might trust Google, shouldn't there be something like separation of powers as a safeguard?
- niels_olson 10y agoThere is: they are intertwined with other regimes: * The international banking regime * The US legal regime for corporate purposes * Many other national regimes for operating purposes
- e12e 10y agoYou trust the hw vendor, the os vendor and the browser vendor - and you trust the CA. Google already had two out of four in many cases. You're not safe from the OS vendor by using a different browser, or CA.