4 ms·

I think there are a lot of site owners who make the mistake of thinking that SSL is only about encryption. They see these certs as a way to prevent data snoopin

by JunkDNA 16y ago

I think there are a lot of site owners who make the mistake of thinking that SSL is only about encryption. They see these certs as a way to prevent data snooping. It's easy to see when a browser doesn't show a little lock icon or warns about an untrusted cert. The identity management side that protects against outright website forgery is harder to police and largely hidden from end users and customers of the CA's. As a result, there is probably insufficient pressure on the CA's to pay attention to some of this stuff.

tbrownaw 16y ago
The identity management side that protects against outright website forgery is harder to police and largely hidden from end users and customers of the CA's If it's hidden from end users, how the hell can it actually work? As a result, there is probably insufficient pressure on the CA's to pay attention to some of this stuff. All that matters is the one CA that pays the least attention, and I don't see how site owners have any control over that.