3 ms·
I would assume that any decent spying agency can produce any certificate they want by some CA trusted by Chrome and Firefox and Safari. And not just NSA / Moss
by matkoniecz 4y ago
I would assume that any decent spying agency can produce any certificate they want by some CA trusted by Chrome and Firefox and Safari.
And not just NSA / Mossad, by also spying agency of an Estonia, Slovenia and Mexico.
- Or is there reason to expect that is not happening?
- And anyway that is not a good reason to let also known malware companies to do the same.
- GlitchMr 4y agoCertificate Transparency system requires certificates issued by CAs to be publicly reported, otherwise web browsers will reject them. Publicly reported certificates then can be monitored by anyone, and anything suspicious could be reported.