3 ms·
I don't think they need to get one; Take a look at the CAs are in your browser. Do you implicitly trust all of those organizations and governments? It doesn't m
by eyeareque 13y ago
I don't think they need to get one; Take a look at the CAs are in your browser. Do you implicitly trust all of those organizations and governments? It doesn't matter if you do as your browser already does.
- lern_too_spel 13y agoThis hasn't been the case since Chrome implemented certificate pinning in 2011.
- throwawayaway 13y agoChrome pinning doesn't break corporate MITM proxies. https://www.imperialviolet.org/2011/05/04/pinning.html https://www.imperialviolet.org/2011/05/04/pinning.html
- lern_too_spel 13y agoObviously, if they can install additional Root CAs, they have enough access to do absolutely anything as your user on your maxhine, including installing trojaned versions of all your apps. That isn't the issue gp was discussing.