3 ms·
> I think we can agree that you can't be doing crimes under one company name and simultaneously operate a trusted CA under another? Playing devil's advocate: W
by Ajedi32 4y ago
> I think we can agree that you can't be doing crimes under one company name and simultaneously operate a trusted CA under another?
Playing devil's advocate: Why not? I mean yes, obviously if you end up in jail that might interfere with your ability to operate a CA (or any company for that matter). But barring that, as long as they haven't done anything to affect the security or proper operation of the CA certificate itself, why is that a basis for removing them from root stores? To the best of my knowledge this action is unprecedented.
- jamincan 4y agoTrust would seem to be the key word here. How can you trust an entity in one context when they have proven themselves untrustworthy in another?
- Ajedi32 4y ago> can you trust an entity in one context when they have proven themselves untrustworthy in another We do that all the time. If, rather than TrustCor being associated with a company making malware we'd instead found out the company's CEO had cheated on his wife, would that be grounds for removing them from the root certificate store? Context matters.