3 ms·
It’s worth mentioning that, if you listen to the podcast mentioned in this thread, DarkMatter, the hacking company, at some point ran a certificate authority th
by aborsy 5y ago
It’s worth mentioning that, if you listen to the podcast mentioned in this thread, DarkMatter, the hacking company, at some point ran a certificate authority that was recognized by browsers including Chrome and Firefox, until lately that news about them came out.
I wouldn’t blindly trust CAs either.
- kbenson 5y agoOh, I don't, it's just also really hard to vet that stuff adequately as a single person, and also why HTTPS isn't always adequate. There's DNS and root servers to consider as well (but that might be harder to hide with all the caching going on). I almost edited my above comment a few minutes afterwards to append something like "and honestly, it would be pretty hard to convince me the NSA or some other group hasn't run one or more VPN providers in the past. The only question in my eye is whether it was a popular one or not."