3 ms·
The biggest risk is one of the X.509v3 certificates for various Certification Authorities (CAs) is compromised. http://www.cyberciti.biz/faq/firefox-adding-tru
by lifeguard 13y ago
The biggest risk is one of the X.509v3 certificates for various Certification Authorities (CAs) is compromised.
http://www.cyberciti.biz/faq/firefox-adding-trusted-ca/ http://www.cyberciti.biz/faq/firefox-adding-trusted-ca/
Discussion of SSL on cryptome:
http://cryptome.org/0005/ssl-broken.htm http://cryptome.org/0005/ssl-broken.htm
- tptacek 13y agoNo, it's not; you can only use a compromised CA cert to MITM traffic, and if you do that, the Chrome users who have Google's actual key identity pinned in their browser will detect you doing that.