3 ms·
Google is a terrible example for discussion here because, as you point out, they also ship a popular browser and are actively contributing positively to PKI sec
by marshray 14y ago
Google is a terrible example for discussion here because, as you point out, they also ship a popular browser and are actively contributing positively to PKI security in several ways.
Perhaps if you were to mentally s/Google/that hospitality company customer of Trustwave/ perhaps you could see my point more clearly.
- tptacek 14y agoMove the goalposts around much, Marsh? You're the one bringing Google up. I agree, that was a bad rhetorical strategy.
- marshray 14y agoI was replying to the specific scenario given by RMH "apple users could not visit google.com". RMH chose Google. For him, it was a brilliant rhetorical strategy :-) So who would be a good example of an organization possessing a 3rd party sub-CA for me to advance my argument? It's much harder because most of them are already relied upon in other critical ways, or are kept secret under confidentiality. "That hospitality company issued a sub-CA by Trustwave" is the best I can come up with at the moment.