4 ms·
I disagree with the current approach. Corporate users do not have a control over this, nor will people where governments try to propose a law forcing people to
by vkaku 3y ago
I disagree with the current approach.
Corporate users do not have a control over this, nor will people where governments try to propose a law forcing people to accept crony CAs to the trusted list.
- choko 3y agoCorporate users don't generally have control period. Keep your personal stuff away from the work laptop. TLS is useless on a machine you don't control.
- woodruffw 3y agoThese are orthogonal issues: it’s not enough for governments to have CAs in trusted roots, as this attempted regulation demonstrates. OS-supplied roots exist because ordinary users can’t and shouldn’t be expected to make PKI policy decisions to use the Internet securely. If you’re trying to circumvent your corporate laptop’s MITM, you’re playing a lost game. It’s also a game that has nothing to do with ordinary users on ordinary, non-work computers.
- immibis 3y agoGovernment crony CAs are already in the trusted list. How does this change anything?
- vkaku 3y agoThis prevents them from actually misusing their certificate on blanket spying programs. Every browser that allows you to configure your trusted list in a more manageable way is one more hurdle these CAs have to cross.