4 ms·
>This enables the government of any EU member state to issue website certificates for interception and surveillance Wouldn't this be very easy to identify?
by landgenoot 3y ago
>This enables the government of any EU member state to issue website certificates for interception and surveillance
Wouldn't this be very easy to identify?
- Dumble 3y agoThe government would be able to obtain a certificate identical to the one of the a website owner (the real one), enabling the mitm attack (for example with the help of ISPs etc).
- landgenoot 3y agoYes, but you will see that the certificate authority suddenly switches to the Hungarian government, while reading an article.
- Urd- 3y agoHow would they get the private key? Or would this CA only allow using certs with private keys they generated instead of using CSRs?
- ulrikrasmussen 3y agoWouldn't Certificate Transparency make it very visible and obvious if they did that?
- Avamander 3y agoCT would not be allowed if ETSI does not allow it. Neither would distrusting that mis-issuing CA be allowed.