3 ms·
How do you know there is a secure channel to the site? If the certificate doesn’t have to be CA signed, I can produce a certificate for google.com.
by lvh 9y ago
How do you know there is a secure channel to the site? If the certificate doesn’t have to be CA signed, I can produce a certificate for google.com.
- hd4 9y agoThat's the point I was making, we won't know, we'll have to come up with a way of dealing without a central authority because the people who want to be our current central authorities are starting to show signs of being compromised. Also yes you could produce a certificate for google.com by trying to MITM between me and my ISP, but if you managed to do that, I think I'd have bigger problems to worry about than getting to the real google.com.