4 ms·

Well, it's not like you can't buy a valid certificate for google.com from a turkish CA that is trusted by all browsers... This has happened before, the only que

Well, it's not like you can't buy a valid certificate for google.com from a turkish CA that is trusted by all browsers... This has happened before, the only question is how much you're willing to pay.

Aissen 13y ago
There's also hardcoded HSTS pining for Google certificates, preventing this.
- est 13y ago
  How does HSTS deal with expired certs?