4 ms·
All signing certificates expire. They must. It's a fundamental part of the security model, because otherwise a malicious actor could take an old, comprimised ce
by ripdog 7y ago
All signing certificates expire. They must. It's a fundamental part of the security model, because otherwise a malicious actor could take an old, comprimised cert and inject it into Firefox, allowing them to run malicious 'signed' addons. This attack would work the exact same way in Chrome, so Chrome will expire it's certificates too.
- speedplane 7y ago> All signing certificates expire. They must. It's a fundamental part of the security model Is it really necessary? Aren't there other possible ways of invalidating a certificate other than its date?
- user17843 7y agoThanks for the explanation. Can you provide me with a link to learn more about how google manages extension certs? I am interested in learning how their system differs from Firefox, if at all.