3 ms·
What exactly are you (or they) afraid of? NSA/FBI/CIA/DHS/etc impersonating other sites using the government CA? Before Certificate Transparency, I'm pretty su
by xg15 3y ago
What exactly are you (or they) afraid of? NSA/FBI/CIA/DHS/etc impersonating other sites using the government CA?
Before Certificate Transparency, I'm pretty sure they already could do that relatively easily by forcing a private CA to make them a cert. (National Security Letters and all that fun)
Even now, with CT, I think they'd be more inclined to use a private or at least an "unofficial" CA, instead of basically leaving "your's truly, The Government" in the CT log. If you already know you'll leave a trace, why would you want to make that trace extra obvious?