4 ms·
I agree, but: the existing CAs are some of the most sketchy companies I see running Internet infrastructure. Domain registrars give them some competition (and a
by quesera 12y ago
I agree, but: the existing CAs are some of the most sketchy companies I see running Internet infrastructure. Domain registrars give them some competition (and are sometimes same same).
Tim writes:
> The only other companies with comparable scale and reach at the moment are, in my opinion, Facebook and (maybe) Microsoft. I think it would make perfect sense for either of them to get into the biz as well.
I'd imagine that Facebook is poised (as poised as Facebook gets) to enter the personal certificate/identity provision space, but It's hard to imagine them doing server certs.
Micro-who?
- alex_duf 12y agoI would NOT trust any US company holding a root certificate. Just because of the patriot act. So no thank you. Giving that power to very little actors is a very bad idea and security should not rely on few actors. We should just be able to revoke certificates more easily.
- quesera 12y agoI don't disagree. The US has some work to do if they care about trust. But easy revocation is not the answer. It scales tremendously poorly. There might not be an answer.