5 ms·
Of course not. You didn't write all the code yourself, even if you did make your own CA and removed all other CAs from your computer (or did you? Because they c
by StavrosK 6y ago
Of course not. You didn't write all the code yourself, even if you did make your own CA and removed all other CAs from your computer (or did you? Because they can MitM you if you didn't). You still have to trust the people who wrote the code to have done so correctly and non-maliciously, plus the people who wrote the OS, and the computer, and everything.
It's a much smaller leap to go from "I trust you to have written the code correctly" to "I also trust you to run the server well" than it is to go from "I don't trust anything" to "I trust all these billions of lines of code I didn't write".