3 ms·

I imagine submitting a fake Symatec key and have them revoke their own cert and the confusion it would create, like a prank. But might actually create real dama

by z3t4 9y ago

I imagine submitting a fake Symatec key and have them revoke their own cert and the confusion it would create, like a prank. But might actually create real damage.

viraptor 9y ago
That makes me wonder if CAs can be revoked this way. I mean, do browsers even check for CAs and intermediates in ocsp?
- Piskvorrr 9y ago
  Theoretically not; but as we have seen, there is often a gap between theory and practice.