3 ms·

I'm kinda worried, personally. The CA/Browser Forum gets to set requirements for anyone who wants to run a website. If they decide website operators should ren

I'm kinda worried, personally. The CA/Browser Forum gets to set requirements for anyone who wants to run a website. If they decide website operators should renew their certificates monthly, website operators don't much choice in the matter. I worry that some day members of the forum will realise how much power that actually is. If there's a trade embargo on Country A, or a genocide going on in Country B, that perhaps 24-month certificates aren't the only sin they should use their power to correct.

makkes 1y ago
From what I can see on the CA/Browser Forum's website (https://cabforum.org/about/membership/members/ https://cabforum.org/about/membership/members/), there is enough diversity in the forum to represent the Web community as a whole. Trade embargoes issued by a single country would likely not be represented by enough CA/B members to be pushed through the Forum. I personally sleep much better knowing that e.g. all major browser vendors cooperate on the CA/B (and elsewhere, e.g. the IETF, W3C, ECMA) instead of the biggest one dictating the rules (which, to be fair, happens to a certain degree, e.g. with Chrome leading the way for certain technologies).
- michaelt 1y ago
  > From what I can see on the CA/Browser Forum's website [...], there is enough diversity in the forum to represent the Web community as a whole. While I agree there are an astonishing number of CAs listed, it seems to me there's no representation of website operators, or website users.