4 ms·
> Because this enables every player in the system to issue valid certificates for bankofamerica.com and rob their bank accounts? No it doesn't. The CA has to b
by amaccuish 7y ago
> Because this enables every player in the system to issue valid certificates for bankofamerica.com and rob their bank accounts?
No it doesn't. The CA has to be installed for the certificate to be valid. It only enables one "player", the CA you choose, to do that.
Internal CAs are still important. It's not always possible to have outbound access to Letsencrypt or register every single machine in external DNS.