4 ms·
You can easily configure your browser to "delete or distrust" the CNNIC's certificates. I just did.
by kyllo 14y ago
You can easily configure your browser to "delete or distrust" the CNNIC's certificates. I just did.
- loeg 14y agoYou or I can, sure. But most people don't know how to. And even I use chrome on many machines… should I have to remember to un-trust CNNIC on every single browser I use?
- kyllo 14y agoIf you're concerned about MITM attacks from China, then yes. But if it actually becomes an issue that most people need to worry about, then a most-people solution will soon be made available (like the browser companies issuing updates that un-trust CNNIC for us). It's not complicated, anyway. At least in Firefox it's just a menu option in Preferences -> Advanced -> Encryption -> View Certificates.
- loeg 14y agoMaybe your older relatives were already familiar with computers, but, anecdotally, watching my parents, aunts, and grandparents attempt to drive multiple layers of menus … I do not think they could figure out how to un-trust CNNIC (and they wouldn't understand what the impact was, anyway…).