3 ms·
We need a solution to this. It comes up every time a ca misbehaves. How hard would it be to allow a website to have multiple certs? If Turktrust's important
by dspeyer 14y ago
We need a solution to this. It comes up every time a ca misbehaves.
How hard would it be to allow a website to have multiple certs? If Turktrust's important customers had redundancy, we could pull less painfully.
Or for less rollout, could browsers acknowledge turktrust only as a root for .tr hosts? That would contain the damage, but probably not hit many legitimate customers.
- raylu 14y agoThen you would just have two attack vectors; compromise either of the private keys and you can be the MITM.
- WatchDog 14y agoConsidering the private keys are probably stored in the same place, I wouldn't consider it an additional attack vector.
- rdl 14y agoYou could use the same key and just submit multiple reqs to different CAs. This wouldn't be any worse than having one, and would be a way to have a "backup cert" in case a CA screws up.
- dspeyer 14y agoYou can already MITM if you compromise any CA's private key.