18 ms·
I don't know, what's best for security? The message is don't use a dodgy provider. Yes it's a pain for customers, but don't forget we're mostly talking about le
by tajen 10y ago
I don't know, what's best for security? The message is don't use a dodgy provider. Yes it's a pain for customers, but don't forget we're mostly talking about level 2/3 certificates (EV, wildcards), so we're talking about banks and major companies here. They both should and have enough resources to monitor the trustworthiness of their providers. In the current case, Symantec's falsifications has been know for long enough.
- cryptarch 10y agoI do think the "drop it like it's hot" approach could work, but it would require browser vendor coordination, so that Symantic https stops working on all major browsers at the same time/day. And honestly, banks should have the expertise and resources to change certs in a day or two, and if they don't that's on them.