3 ms·
TLS issuance is decentralized too, yet Certificate Transparency provides accountability, and inclusion into Mozilla's trusted CA list is basically the vetting p
by pas 6y ago
TLS issuance is decentralized too, yet Certificate Transparency provides accountability, and inclusion into Mozilla's trusted CA list is basically the vetting process that binds CAs to legal entities.
In theory in crypto currency world "staking" is this process.
- lmm 6y agoTLS is not decentralised, it's hierarchical. There are a fairly small number of root CAs, and an even smaller number of browser makers who define their trusted lists.
- pas 6y agoJust the Mozilla CA list has more than a hundred CAs ... https://ccadb-public.secure.force.com/mozilla/IncludedCACertificateReport https://ccadb-public.secure.force.com/mozilla/IncludedCACert... And you can install your trust root if you want, for example I can't find any Russian ones in that list, so probably the Russian government uses internal ones. (Their tax authority interestingly uses Sectigo a CA from the UK.)