3 ms·
“You” means an end user, and “sustainably” is in this context “mean ordinary Internet usage.” If you want to maintain your own CA bundle, absolutely nothing is
by woodruffw 4y ago
“You” means an end user, and “sustainably” is in this context “mean ordinary Internet usage.”
If you want to maintain your own CA bundle, absolutely nothing is stopping you from doing so. But it would not be reasonable of us to expect ordinary users, including people who just want to connect to their banks securely, to do so. And even if we were to make such an unreasonable imposition, it’s not clear that it actually improves their security posture in any way.
- 1vuio0pswjnm7 4y agoAgreed. The point I was was raising originally is why other options besides sourcing certificates from third parties are not considered. Using a Mozilla bundle is one option. Relying on hardcoded certificates in a web browser or other application is another option. IMO, these are not the only options. The "user" should have a choice. With respect to computers and the internet, there is substantial history of problems with third party intermediaries. Deliberately excluding, or even just failing to recognise, the option for a user to eliminate a third party intermediary is highly suspect given that history, IMHO.