3 ms·
> Microsoft helpfully provides the government of Tunisia with a trusted root CA in their products Isn't this rather huge news? Why did they do this sort of dow
by ZoFreX 16y ago
> Microsoft helpfully provides the government of Tunisia with a trusted root CA in their products
Isn't this rather huge news? Why did they do this sort of downgrading hackery when they could do a more elegant (and slightly more transparent) man in the middle?
- marshray 16y agoA) It's better to avoid using your capability even if you have it. B) Probably a lot of users prefer Mozilla, though it may defer to the system store on Windows anyway, I'm not sure. C) For the same reasons it's a pain for FB to use https everywhere, it's a pain for Tunisia to set up SSL interception on their outbound connections. There are certainly off-the-shelf boxes which can do it though.