3 ms·
Chrome and Safari only accept certificates which are publicly logged in Certificate Transparency logs, so if a government actor uses a CA to issue malicious cer
by agwa 3y ago
Chrome and Safari only accept certificates which are publicly logged in Certificate Transparency logs, so if a government actor uses a CA to issue malicious certificates, they run a high risk of being detected and having that CA distrusted.
When evidence came to light last year that Trustcor might be compromised by government actors, it was distrusted by browsers, as was Dark Matter before them. If you have any evidence that current CAs have been compromised, please provide it so they too can be distrusted.