3 ms·
So the extension being installed on some malicious site would have a popup talking about security certificates and such, and asking the user whether they want t
by jfoster 13y ago
So the extension being installed on some malicious site would have a popup talking about security certificates and such, and asking the user whether they want to proceed? You and I might think twice, but most users just click "Yes". Signed certificates would not be adequate to protect the average user.
- Zikes 13y agoThe idea is that the browser would only accept signed certificates, and only those certificates which the signing authority has not revoked. So long as the signing authority is in a trusted list, the user would see no Yes/No option at all. It would simply install, or be rejected outright with an explanation of why. It would be like limiting web browsing to HTTPS only, except you would not be given the option to click through for unsigned certificates.
- jfoster 13y agoSo then Google could still revoke the certificates of any ad blocking software.