3 ms·
Even rogue states have their own CA's and we are trusting them. Thát is a real security concern.
by coretx 4y ago
Even rogue states have their own CA's and we are trusting them.
Thát is a real security concern.
- PradeetPatel 4y ago[Citations needed] Last time I checked we don't have any CA's from North Korea or Afghanistan... Happy to be proven wrong.
- kingofpandora 4y agoThose aren't the only two "rogue dates.
- throw_a_grenade 4y agoLast time it was KZ's MITM cert that was rejected: https://blog.mozilla.org/security/2019/08/21/protecting-our-users-in-kazakhstan/ https://blog.mozilla.org/security/2019/08/21/protecting-our-.... Although you can argue that US' FPKI is "rogue" for the purposes of WebPKI (there's no control, no transparency, no audit etc.) and cross signature over FPKI Bridge was one of the reasons contributing to Symantec forcible retirement.