3 ms·
For this to be useful in production, it would need to be signed by a proper CA. No CA will sign this. And if they accidentally did, it would be revoked immediat
by pilif 6y ago
For this to be useful in production, it would need to be signed by a proper CA. No CA will sign this. And if they accidentally did, it would be revoked immediately in order to not end up like Diginotar and Symantec
- squiggleblaz 6y agoDiginotar and Symantec ended up like Diginotar and Symantec. Even Let's Encrypt backed down. There seems to be strong pressure on CAs to not do the secure thing when they've made a mistake.