3 ms·
CAs don't make this problem go away; they just shift it to a central "trusted" party. With the CA model, we're assuming that Let's Encrypt isn't being MITMed.
by greyface- 2y ago
CAs don't make this problem go away; they just shift it to a central "trusted" party. With the CA model, we're assuming that Let's Encrypt isn't being MITMed.
- foul 2y agoAlso we assume no MITM when updating the ca-cert thing on OSes.