3 ms·
Is it unreasonable to expect a foreign ecommerce site to use a CA that it's users can trust?
by hamandcheese 9y ago
Is it unreasonable to expect a foreign ecommerce site to use a CA that it's users can trust?
- nl 9y agoYes, absolutely. I think the @grandalf idea of selectable trust list providers has some merit (although there are some security trade-offs there). I don't think the automatic mistrust of certificates from "CAs from China, Turkey, Russia" automatically follows from that.
- vacri 9y agoYou're right. Americans should discard Turkish and Chinese CAs in favour of one homed in the heart of their tech capital in Silicon Valley. Clearly those foreign ones are shysters and not to be trusted like a locally-built, trustworthy business! Oh, what's that? Symantec is an American company, headquartered in Mountain View, CA?
- jrochkind1 9y agoMeanwhile, the rest of the world probably wonders if they should trust American CA's! I'm not sure a geographically silo'd internet is what we should be going for. i miss the days when the dream of the internet was prefiguring a borderless world.