3 ms·
Handling over CA keys wouldn't allow them to mitm things - you'd need the server operators private key for that. This could allow them to issue new certs, but t
by zifnab06 7y ago
Handling over CA keys wouldn't allow them to mitm things - you'd need the server operators private key for that. This could allow them to issue new certs, but they'd have to be added to certificate transparency to be valid, and everyone would know rather quickly if they tried.