2 ms·
"Users can pick whatever CA they trust or whatever CA their technical friends and family recommends they trust." Which means you'll wind up with the situation
by betterunix 14y ago
"Users can pick whatever CA they trust or whatever CA their technical friends and family recommends they trust."
Which means you'll wind up with the situation we have with TLS: hundreds of CAs, all trusted by default, most not even remotely trustworthy. Users will have no idea about these CAs and so the CAs will never have to worry about being loose with certificates.
- krichman 14y agoI sure hope we'd be smarter about it this time. I envision something more like the average user chooses from, i.e., Canonical and Microsoft, while a more technical user would choose one of those and also install his own self-signed root as a CA.