3 ms·
The require to get the private key? When they could ask for the cert and just cross-sign? Can't imagine any valid reason for that... Would be nice to get a con
by baobun 1y ago
The require to get the private key? When they could ask for the cert and just cross-sign? Can't imagine any valid reason for that...
Would be nice to get a confirmation of this as it sounds wild.
- ozim 1y agoValid reason for them is they would have to spend money on supporting and maintaining cross signing. I can image it is much much cheaper to just store priv key. So if they can get away with it they just do it, no one is there to stop them.
- jbk 1y ago> Can't imagine any valid reason for that... Depends of your paranoia level: either because laziness or because of evil intentions...
- bigbadfeline 1y ago> Depends of your paranoia level: either because laziness or because of evil intentions... They disposed of the "Don't be evil" promise in a very active and energetic manner, seems like we have rational grounds for deciding, without paranoia :)