4 ms·
Shouldn’t the default be that an entity wishing to be a CA be untrusted and it has to present sufficient everdence to be regarded as trustworthy? Given the dan
by qtplatypus 7y ago
Shouldn’t the default be that an entity wishing to be a CA be untrusted and it has to present sufficient everdence to be regarded as trustworthy? Given the dangers of a rouge CA vs the smaller downside of it failing to be regarded as trusted it seems that if there is any rational doubt as to trustworthiness then you shouldn’t add it to the trusted list.
- ziddoap 7y agoValid point and definitely discussed in the mailing list by people much more intelligible on the subject than I. I was more pointing out that the article doesn't really capture the actual conversation on the mailing list.