4 ms·
> which means we need an initial set of trusted CAs. How would you validate that the initial set of trusted CA roots is actually from those CAs?
by jf 10y ago
> which means we need an initial set of trusted CAs.
How would you validate that the initial set of trusted CA roots is actually from those CAs?
- inglor 10y agoIt ships with your operating system, which you physically obtain from another computer (with hardware like a USB drive or via internal network).
- tscs37 10y agoBut how to trust that this other computer has a good set of CAs?
- shawnz 10y agoHow can you know your signing software is not backdoored? How can you know you're not living in a computer simulation?
- tscs37 10y agoWell, I'm certain my eyes are real so I am certainly not living in a computer simulation.
- iamatworknow 10y agoHow Can Our CA Roots Be Real If Our Eyes Aren't Real https://twitter.com/officialjaden/status/329768040235413504?lang=en https://twitter.com/officialjaden/status/329768040235413504?...
- Piskvorrr 10y ago"If real is what you can feel, smell, taste and see, then 'real' is simply electrical signals interpreted by your brain." -Morpheus, The Matrix (finally, finally there's a use for that quote!)