2 ms·
That's not the issue. The issue is the majority of browser users will use the default set of root certificates. Forking and removing them is the least of the di
by gsnedders 13y ago
That's not the issue. The issue is the majority of browser users will use the default set of root certificates. Forking and removing them is the least of the difficulties; getting people to use the fork is the problem.
- hnriot 13y agobut not my problem...
- rmc 13y agoIf you live in a police state where everyone you know is being spied on my the government, that's sounds kinda sucky.
- gsnedders 13y agoOh, sure, some may know enough and care enough to do something about it, change browser, change root certs — whatever is needed. But this isn't about them, this is about society at large. This is about whether your mother, your father can use their webmail account without being spied on: would you want all your emails to and from them available because of a MITM attack on someone who is not you? (I realise email is not a great example, with emails typically being transmitted in plaintext between SMTP servers, but is reasonable in the generic digital communication sense.)
- 6d0debc071 13y agoRelevant infrastructure seems less likely to be developed and maintained if an insignificant number of people use it.