3 ms·
As if browser vendors never included any shady or incompetent root CA? For example: https://www.techtarget.com/searchsecurity/news/252436120/23000-Symantec-cer
by bombolo 4y ago
As if browser vendors never included any shady or incompetent root CA?
For example: https://www.techtarget.com/searchsecurity/news/252436120/23000-Symantec-certificates-revoked-following-leak-of-private-keys https://www.techtarget.com/searchsecurity/news/252436120/230...
Firefox seems to include root CA from the governments of: Hong Kong (so China?), Spain, Turkey, Tunisia, Netherlands.
- olliej 4y agoAnd when they find evidence of a CA misbehaving they revoke them, as here, they don’t go to the EU and say “hey we think you need to re audit this company” and then wait a few months/years while the business continues to pay the EU to remain in the root stores.