4 ms·

Whos auditing the ca?

• psykovsky 12y ago
  Who's auditing the CA's currently trusted by your browser?
  • zobzu 12y ago
    various 3rd parties. this is required by the cab forum which my browser requires as well. inform yourself if you want to write stuff like that. even more, its sad that people think CAs have zero checking and just give what, money to browsers to be included? Thanksfully its not like that yet.
    • psykovsky 12y ago
      So,if you knew the answer to your own question, why did you ask?
      • zobzu 12y ago
        I did not, actually. Same subject, but the question is different since this is a CA signed by a CA in this case.
• schoen 12y ago
  We intend to have a WebTrust audit, just like other CAs do.
  • zobzu 12y ago
    thanks!
• themartorana 12y ago
  Who's auditing the auditors? Remember Moody's? It's not entirely analogous, but it's not far from it. At some point down the chain, you have to rely on trust to some degree. Either disappear in to the wilderness and completely disconnect from the grid or - at some point - you have to trust someone.
  • zobzu 12y ago
    All CAs for most browsers are all audited by a third party. That's what provides the trust. https://cabforum.org/baseline-requirements/ https://cabforum.org/baseline-requirements/ https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/inclusion/ https://www.mozilla.org/en-US/about/governance/policies/secu... https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/ https://www.mozilla.org/en-US/about/governance/policies/secu... Geez the people without a clue wanting to patronize on HN - I'm telling you - nothing like that to lose faith in humanity.