3 ms·
infamously the hong kong post office is/was a trusted CA https://bugzilla.mozilla.org/show_bug.cgi?id=373537 https://bugzilla.mozilla.org/show_bug.cgi?id=37353
by wnevets 7y ago
infamously the hong kong post office is/was a trusted CA
https://bugzilla.mozilla.org/show_bug.cgi?id=373537 https://bugzilla.mozilla.org/show_bug.cgi?id=373537
- computerfriend 7y agoWhat's infamous about it?
- cpeterso 7y agoMore infamous is the request to add the root certificate for "Honest Achmed's Used Cars and Certificates": https://bugzilla.mozilla.org/show_bug.cgi?id=647959 https://bugzilla.mozilla.org/show_bug.cgi?id=647959
- Fnoord 7y agoI guess because it is an unusual relatively small entity who's position as a CA is unusual. Plus, without certificate pinning [ie. before HSTS] you don't want rogue CAs.
- 0x0 7y agoHSTS has nothing to do with pinning, you're probably thinking of the deprecated HPKP
- Dahoon 7y agoWhat's wrong with that? Is it worse than Comodo?