4 ms·
When it comes to which CAs are trusted, Mozzila is generally in the lead. Not an elected group, true. But a foundation with a public charitable goal, and an en
by rocqua 5y ago
When it comes to which CAs are trusted, Mozzila is generally in the lead.
Not an elected group, true. But a foundation with a public charitable goal, and an entity with much less interest in being able to intercept communications than states.
I think it's better of in the hands of an un-elected foundation than in the hands of an elected, but politicized entity with interests in intercepting communication.
- toyg 5y ago> When it comes to which CAs are trusted, Mozzila is generally in the lead. Mozilla might well not be around forever, considering the state of their market share. And let's be honest, as long as their main source of funds comes from Google, politically speaking they end up as a fig's leaf around Google's interests. As far as we know, they might take certain decisions about the life or death of any given CA after someone at Alphabet picks up the phone. Maybe they don't do that, but there is no guarantee nor formal process to address this - particularly not in Europe, since all these are US entities.
- deleted 5y ago[deleted]
- JoshTriplett 5y agoI've watched how Mozilla's CA process operates in past incidents, as well as in the review of new CAs, and the criteria they use and the evaluation they do seems quite transparent.