4 ms·
None of it really matters though if the certificate authorities are compromised.
by kyuudou 6y ago
None of it really matters though if the certificate authorities are compromised.
- tialaramex 6y agoHow so? If a CA is compromised (which was very rare, even under historically more lax oversight than today) the bad guys would need to issue themselves a cert from this compromised CA, get it logged, and then from an on-path position use the certificate to MITM you and capture your URL which presumably they wanted very badly as this seems like a really expensive approach. The CA does not have the ability to decrypt eavesdropped HTTPS traffic for example.