3 ms·
It's unfortunate that more people don't understand just how serious a breach it is to install special root certificates. This actually does a complete home run
by RyanZAG 14y ago
It's unfortunate that more people don't understand just how serious a breach it is to install special root certificates. This actually does a complete home run around the entirety of web-based security.
It's very close to having every physical lock sold by a company having a special key that can open all of the locks they sell. Even if you trust that company to buy your lock from them, it's going much too far in allowing them to open up your safe whenever they want to.
- eli 14y agoSure, if you don't trust your AV. But if you don't trust your AV, you've already got problems.
- relic 14y agoI think there's a difference between not trusting an AV, and not trusting that the humans who created it didn't make any mistakes. By assuming that your AV is perfect and can in no way be compromised is a dangerous assumption, because if it fails even the tiniest bit, you are royally screwed.