3 ms·
The private companies that do have incidental root certificates in trust stores, like Visa, are endemic sources of compliance issues. If any company should ope
by iancarroll 5y ago
The private companies that do have incidental root certificates in trust stores, like Visa, are endemic sources of compliance issues.
If any company should operate a CA, it should probably not be random enterprise companies.
For one example: https://wiki.mozilla.org/CA:Visa_Issues https://wiki.mozilla.org/CA:Visa_Issues
- shartte 5y agoI think the parent poster meant that if X.509 Name Constraints were widely deployed, Visas CA could be limited to Visa's TLD+1s. In the same way, government affiliated CAs could be limited to their own country TLDs, or a development CA could be limited to localhost.