3 ms·
In all countries, giving the government the ability to issue SSL certificates would be a catastrophe in terms of surveillance and censorship. FTFY
by macinjosh 7y ago
In all countries, giving the government the ability to issue SSL certificates would be a catastrophe in terms of surveillance and censorship.
FTFY
- schoen 7y agoBy the way, there have been a number of openly government-operated root CAs in numerous countries for decades. Before I got involved with Let's Encrypt, I was very nervous about government influence in PKI and thought this was quite concerning. (That was also before Certificate Transparency.) A quick look at a root store turns up subject=C = CN, O = China Financial Certification Authority, CN = CFCA EV ROOT subject=C = HK, O = Hongkong Post, CN = Hongkong Post Root CA 1 subject=C = NL, O = Staat der Nederlanden, CN = Staat der Nederlanden EV Root CA [and other roots with the same organization] subject=C = TW, O = Government Root Certification Authority I think there are several others, probably especially at the intermediate level.