2 ms·
Central certificate authorities were all web users put their trust against money compensation to the CA are a broken security model! Especially in the new inter
by acd 12y ago
Central certificate authorities were all web users put their trust against money compensation to the CA are a broken security model! Especially in the new internet security era were we have government hackers with almost unlimited budgets. Governments will hack into CAs and issue fake certificates to popular domains that they want to Man in the middle attack and to that we have no protection. I think the solution is a voting mechanism or digital ID. So that the engineer working at Google can sign the certificate with a Corporate Google ID.
Central CAs is almost as broken security as credit cards with the card number readable in cleartext on the front of the card.