2 ms·
I’m not aware of that ever happening though - and the workaround is just to get another certificate from another CA vendor. I have code-signing certificates my
by DaiPlusPlus 6y ago
I’m not aware of that ever happening though - and the workaround is just to get another certificate from another CA vendor.
I have code-signing certificates myself: the verification process did not fill me with confidence that the system is trustworthy - GlobalSign had me email them details of my DUNS/ UBI / business registration and a notarised copy of my driving license and checked that my name matched, and that was it. I could easily fraudulently obtain a code-signing certificate with a fake ID matching the name and state of some other vendor I just took a disliking to.
(I recognise that this system’s adding of barriers-to-entry does eliminate large numbers of opportunistic malware and provide a means to quickly disable installation and execution of revoked certificates - so I’m not calling for the system to be torn down!).