3 ms·
>we can only trust Verisign when it says "anything we do with our private key we do with security measures adequate to the task of protecting the entire Interne
by VladRussian 15y ago
>we can only trust Verisign when it says "anything we do with our private key we do with security measures adequate to the task of protecting the entire Internet".
like we trust with the same to any other CA in the browser trusted root store.
- tptacek 15y agoExactly. We could with the flip of a switch ban intermediate CAs; the browser's TLS library sees the chain of intermediate CA=YES certs.