3 ms·
And the browsers, in turn, are controlled by a few big tech companies. Is it a good idea to give those companies control over the trust architecture of the inte
by quotemstr 7y ago
And the browsers, in turn, are controlled by a few big tech companies. Is it a good idea to give those companies control over the trust architecture of the internet? What happens if you get on tech's persona non grata list? Do you not get to use the PKI?
- tialaramex 7y agoYou'd need to ask Microsoft about that, theirs is (as far as I know) the only Trust Store which demands they get unilateral override for revocation decisions. That is, if Mozilla, or Apple, or Google reach out to Let's Encrypt and say "killtrump.example is not acceptable, revoke their certificate" Let's Encrypt says "No" and nothing happens. But if Microsoft does so, Let's Encrypt can say "Please reconsider this seems like a bad idea" and then Microsoft can say "We've thought about it, revoke" and the choice is only whether Let's Encrypt wants to remain trusted in Microsoft's products. Nobody else has a rule like that, and it isn't a new rule, it's a published part of Microsoft's policy. Microsoft says they use it only to protect Microsoft's customers from phishing and similar attacks. Perhaps that's even true.