4 ms·
Unfortunately we the public have little visibility into how browser makers choose which CAs will live and which will die. This seems to be a governmental like f
by bdamm 9y ago
Unfortunately we the public have little visibility into how browser makers choose which CAs will live and which will die. This seems to be a governmental like function, one which companies are now operating, with no record of the court to speak of.
DigiNotar died, but Comodo[0] was too big to fail.
[0]: https://www.infoworld.com/article/2623829/authentication/weaknesses-in-ssl-certification-exposed-by-comodo-security-breach.html https://www.infoworld.com/article/2623829/authentication/wea...
- tialaramex 9y agoThis is true for the two biggest commercial trust stores, Apple and Microsoft. But Mozilla conducts almost all its activities in public and this is no different. The group m.d.s.policy is open to public participation, as well as having some participants from other trust stores and CAs. You should probably lurk for a while before posting (people who show up one day writing that all the CAs should be kicked out get basically the same reaction as if you stumble into a bar demanding an end to alcoholic beverages at the top of your lungs) but if you have something worth saying that's somewhere it will be seen.