4 ms·

I mean, what's the alternative? We see people here complain every single day about unilateral action taken by Google and the like. Which is better, to have to d

I mean, what's the alternative? We see people here complain every single day about unilateral action taken by Google and the like. Which is better, to have to deal with the rule of laws written by an elected body in a court, or to shout into the wind at a corporation?

gruez 5y ago
>We see people here complain every single day about unilateral action taken by Google and the like. While that's true to some extent, I don't find that to be the case in this specific area (ie. trust store and/or encryption). Are the browser vendors unfairly applying rules (ie. favoring incumbents)? Are their requirements too arduous? Are they not revoking bad CAs? It's not clear what this regulation is supposed to solve.
JoshTriplett 5y ago
Third option: work with a transparent Open Source organization that processes CAs on the basis of keeping the Internet secure, where nation-state-level interception is considered part of the threat model.