3 ms·
Not to mention the CA could potentially, intentionally or not, leak keys and allow governments, hackers or other interested entities to decrypt traffic. Centra
by mrd3v0 3y ago
Not to mention the CA could potentially, intentionally or not, leak keys and allow governments, hackers or other interested entities to decrypt traffic.
Centralising trust will always be a bad idea, regardless of context.
- johncolanduoni 3y agoMost TLS connections these days use cipher suites with perfect forward secrecy so governments won't be able to decrypt the connections without an active MITM attack. Since Certificate Transparency is effectively required for all CAs now, that will leave a paper trail.