3 ms·

Mozilla seems in total agreement with Chrome on this, and it also takes unilateral CA authority action. This is not a negotiation where the orgs have the right

• toomuchtodo 10y ago
  It's always a negotiation. He who has the least to lose wins. "Why isn't my browser working??" "So sorry about that, those darn nerds made a change on us." I have seen this exact scenario play out. Mozilla and Google might be respected in the tech community; to most people they're an extremely tiny part of their life. "Your the IT man, just make it work"
  • 5ilv3r 10y ago
    You're arguing "Right" vs. "Easy".
    • toomuchtodo 10y ago
      Easy there Tex, I'm not arguing. I am simply describing the behaviors between large orgs in a dysfunctional ecosystem/marketplace. As you get older, you transition from "this is how it should be!" to "this is how it works, what is a realistic amount of change that can occur?"
      • joncampbelldev 10y ago
        i would say the relevant "this is how it works" is having a globally trusted CA system that isn't abused by large CAs just because they think no one will dare punish them. What would any of these large Symantec customers says if in the future their security was compromised due to mis-issued certificates? I doubt they'd be thrilled they were saved some dev time getting their certificates signed by another root in exchange. it's very clear from Symantec's language here and elsewhere that they wouldn't be doing shit about this is chrome weren't taking it so seriously
• fooey 10y ago
  And when Google and Moz both are "blocking a security threat" MS and Apple will have follow suit or they'll get buried by by PR and advertising attacks.