4 ms·
Well, that sucks. That effectively makes HTTPS worthless there doesn't it? Also on the other link I have seen another relevant article [0] on how BitTorrent co
by toxicFork 12y ago
Well, that sucks. That effectively makes HTTPS worthless there doesn't it?
Also on the other link I have seen another relevant article [0] on how BitTorrent could be used for attacks from China.
Scary stuff.
[0] http://furbo.org/2015/01/22/fear-china/ http://furbo.org/2015/01/22/fear-china/
- mikeash 12y agoCAs aren't geographically limited. Any CA trusted by your computer is trusted for any domain anywhere (with the exception of certificate pinning, which isn't commonly used). That means that a single rogue CA is enough to make HTTPS worthless everywhere.
- bbatsell 12y agoMozilla actually has done this (sort of), once. They restricted French agency ANSSI's root CA to only be valid for TLDs ending in .fr, .gp, .gf, .mq, .re, .yt, .pm, .bl, .mf, .wf, .pf, .nc, .tf. https://wiki.mozilla.org/CA:IncludedCAs https://wiki.mozilla.org/CA:IncludedCAs