2 ms·
Who is going to sign what? If you mean the certificates that the certificate authority issues, then the certificate authority signs them itself. If you mean w
by mooism2 16y ago
Who is going to sign what?
If you mean the certificates that the certificate authority issues, then the certificate authority signs them itself.
If you mean who signs the certificate authority's authority certificate, then either another certificate authority signs it, or the certificate authority signs it itself and pays the browser makers to include it as a root certificate in their browsers.
I'm not sure what you're trying to get at?
- varjag 16y agoWhat is the chance of Iran becoming a root CA? Passing a WebTrust audit? It's not like you can become one just by showing up.
- mooism2 16y agoEtisalat (state-controlled telecoms company in UAE) is a certificate authority. They are not a root CA --- Verizon signed their CA certificate. They have used this capability to intercept SSL communications. If a UAE state-controlled telecoms company can become a CA, why not an Iranian state-controlled telecoms company? Or Chinese?