4 ms·
Hey, fellow genius on Hacker News, do note that TLS doesn't protect against state actors, because they can very easily manipulate certificate authorities, and a
by verisimilitudes 4y ago
Hey, fellow genius on Hacker News, do note that TLS doesn't protect against state actors, because they can very easily manipulate certificate authorities, and a malicious certificate authority completely removes most protections TLS supposedly provides.
- foverzar 4y agoIt could, if the CAs were globally distributed. Unfortunately currently they are all under the US influence.
- tsimionescu 4y agoIt's enough to compromise one CA for TLS to be entirely defeated - any CA can sign a certificate for any site, and TLS implementations will accept it. The only defense is pinned certificates, but that comes with its own problems.
- Avamander 4y agoCertificate Transparency is enforced, so it'd be quite easy to detect that compromise by now.
- tsimionescu 4y agoSure, but still somewhat after the fact.