4 ms·
You're arguing "Right" vs. "Easy".
by 5ilv3r 9y ago
You're arguing "Right" vs. "Easy".
- toomuchtodo 9y agoEasy there Tex, I'm not arguing. I am simply describing the behaviors between large orgs in a dysfunctional ecosystem/marketplace. As you get older, you transition from "this is how it should be!" to "this is how it works, what is a realistic amount of change that can occur?"
- joncampbelldev 9y agoi would say the relevant "this is how it works" is having a globally trusted CA system that isn't abused by large CAs just because they think no one will dare punish them. What would any of these large Symantec customers says if in the future their security was compromised due to mis-issued certificates? I doubt they'd be thrilled they were saved some dev time getting their certificates signed by another root in exchange. it's very clear from Symantec's language here and elsewhere that they wouldn't be doing shit about this is chrome weren't taking it so seriously