4 ms·
Requiring users to manage their own root bundle is a recipe for disaster for ordinary users. You shouldn’t need to understand path building to securely initiate
by woodruffw 3y ago
Requiring users to manage their own root bundle is a recipe for disaster for ordinary users. You shouldn’t need to understand path building to securely initiate a connection with a website.
(Besides, macOS and Windows do let you tweak the trust store from their respective GUIs. There’s nothing stopping you from doing so.)
- vkaku 3y agoI disagree with the current approach. Corporate users do not have a control over this, nor will people where governments try to propose a law forcing people to accept crony CAs to the trusted list.
- choko 3y agoCorporate users don't generally have control period. Keep your personal stuff away from the work laptop. TLS is useless on a machine you don't control.
- woodruffw 3y agoThese are orthogonal issues: it’s not enough for governments to have CAs in trusted roots, as this attempted regulation demonstrates. OS-supplied roots exist because ordinary users can’t and shouldn’t be expected to make PKI policy decisions to use the Internet securely. If you’re trying to circumvent your corporate laptop’s MITM, you’re playing a lost game. It’s also a game that has nothing to do with ordinary users on ordinary, non-work computers.
- immibis 3y agoGovernment crony CAs are already in the trusted list. How does this change anything?
- vkaku 3y agoThis prevents them from actually misusing their certificate on blanket spying programs. Every browser that allows you to configure your trusted list in a more manageable way is one more hurdle these CAs have to cross.
- whoopdedo 3y agoAnyone who would suggest putting security decisions in the face of users should be reminded of Windows Vista and its User Account Control. Dialog fatigue is not to be taken lightly. See also, cookie consent banners.
- vkaku 3y agoThen a first time setup may be okay. People assume everything is safe because there's a green lock icon but the situation must change for improving the actual users privacy. While dialogue fatigue is true, browsers can take care of offloading the cookie dialogues if there were a standard for it. Doing what's necessary for privacy is no excuse to throw bad UI at a user. There has to be a way to customize our transit security and subsequently privacy. It's a step in the right direction.