35 ms·
The irony of arguing that the rapid rate of certificate revocations is proof of the system being necessary and secure. No, it's proof that the system is useless
by stefan_ 6y ago
The irony of arguing that the rapid rate of certificate revocations is proof of the system being necessary and secure. No, it's proof that the system is useless. Code signing is a dead end, and we have known that latest with Stuxnet.
- jezfromfuture 6y agoA nation state virus that stole a cert is not a good argument against this , windows only started checking certs very recently please get your head out of the sand. It’s worked great for many years for us Mac users.
- viktorcode 6y agoWith the system checking for certificate validity Stuxnet would have stopped shortly after its certificate was revoked. Regardless, Stuxnet example is way off the mark. It was designed to work in air-gapped network and defeat particular set of obstacles.