3 ms·
So, what you're saying is that Mozilla could sanction Russian CAs such that nobody would trust them?
by SiempreViernes 5y ago
So, what you're saying is that Mozilla could sanction Russian CAs such that nobody would trust them?
- Thiez 5y agoThey theoretically could, but why?
- aaomidi 5y agoNo because that trust in Mozilla is only placed there because they only care about CAs operating properly. Nothing else.
- tialaramex 5y agoFirst there would have to be Russian CAs. There aren't any. Most likely because Russians wouldn't trust a Russian CA, so what's the point setting one up? If against the odds somebody had built a trustworthy Russian CA and it was currently in the root trust store for Firefox (and so likely everything else) then we might have this question to ponder, although the answer is likely "No" since this hypothetical CA isn't doing anything wrong, but that's a hypothetical very different from reality.
- jcranmer 5y agoIn principle, they could. In practice, you need a really good reason to do so. And "government-owned" isn't even sufficiently good reason, although "government-mandated MITM" is (see the banning of some Kazakhstan CAs for that reason).