3 ms·
> So bad news: it's hard. good news: people are trying. More bad news: They're failing pretty hard. CACert have been around for a long time, and still haven't
by M2Ys4U 13y ago
> So bad news: it's hard. good news: people are trying.
More bad news: They're failing pretty hard. CACert have been around for a long time, and still haven't managed to get themselves audited.
- e12e 13y agoThere was an interesting thread on the subject on the crypto-list last year ("How much does it cost to start a root CA ?"), see eg: http://lists.randombit.net/pipermail/cryptography/2013-January/003594.html http://lists.randombit.net/pipermail/cryptography/2013-Janua... http://lists.randombit.net/pipermail/cryptography/2013-January/003609.html http://lists.randombit.net/pipermail/cryptography/2013-Janua... http://lists.randombit.net/pipermail/cryptography/2013-January/003620.html http://lists.randombit.net/pipermail/cryptography/2013-Janua... And for good measure, on the subject of certs and trust, the thread after: "another cert failure" (2011) http://lists.randombit.net/pipermail/cryptography/2013-January/003592.html http://lists.randombit.net/pipermail/cryptography/2013-Janua...