3 ms·
While I agree with you about pulling the rug out from users - if the CA is already forging certificates for important domains, then how much security do they re
by sc68cal 14y ago
While I agree with you about pulling the rug out from users - if the CA is already forging certificates for important domains, then how much security do they really have?
- dustingetz 14y agoright now only the turkish government can do MITM - other parties can't.
- jacquesm 14y ago> right now only the turkish government can do MITM - other parties can't. First, if true that's a small comfort. Second, how do you know that is true?
- danielweber 14y agoIt's in the Turkish government's to use these invalid certs as little as possible, so they are probably going to use them against people like Turkish dissidents. (I don't mean to dismiss their interests, but they are distinct from other people's interests.)
- tptacek 14y agoMore than they do if the whole CA is removed. Sorry, annoying but true. Promote TACK!