4 ms·

This is what should happen when a CA does something insecure. Kick them out and make an example out of them. If you don't the whole system is worthless. Ex: ht

This is what should happen when a CA does something insecure. Kick them out and make an example out of them. If you don't the whole system is worthless. Ex: http://en.wikipedia.org/wiki/Comodo_Group#2011_breach_incident http://en.wikipedia.org/wiki/Comodo_Group#2011_breach_incide... Nothing happened after this breach, which was a shame.

EdwardDiego 12y ago
Hey mate, your "2011 breach incident" anchor points to nothing in the page. Am I missing something?
- danuker 12y ago
  It seems to be [here](http://en.wikipedia.org/wiki/Comodo_Group#Controversies http://en.wikipedia.org/wiki/Comodo_Group#Controversies) now.
- eyeareque 12y ago
  [edit] Let's try this again: https://www.schneier.com/blog/archives/2011/03/comodo_group_is.html https://www.schneier.com/blog/archives/2011/03/comodo_group_... The above link should work. This will teach me to link to an anchor on Wikipedia. [original post] It should have been: https://en.wikipedia.org/wiki/Comodo_Group#Certificate_hacking https://en.wikipedia.org/wiki/Comodo_Group#Certificate_hacki...
  - jvoorhis 12y ago
    That doesn't work now either. Playing whacamole with an editor?
    - ishtu 12y ago
      works great for me
scotty79 12y ago
> If you don't the whole system is worthless. The whole system is worthless and it should be replaced with something more like bitcoin. I don't really trust any certificate issuer more than I trust self issued certificate.
- coderdude 12y ago
  >it should be replaced with something more like bitcoin. What does that even mean?
  - feld 12y ago
    it doesn't mean anything; just another parrot
  - giovani 12y ago
    He was probably talking about the centralised model used with CAs, and trying to start a discussion about an alternative to the CA model, probably some way of decentralised control, hence the bitcoin reference. Convergence [1] comes to mind. [1] http://convergence.io/ http://convergence.io/
    - dheera 12y ago
      I would be in favor of decentralised as well; nobody should have to pay money to some bunch of trolls just to use encryption; this is a friction point for a lot of newcomers to web development. In fact, making HTTPS free to use would probably be the best thing that could ever be done for cybersecurity for mankind. Make it zero-friction over HTTP, somehow. Perhaps Google might want to sponsor this? :)
      - giovani 12y ago
        > In fact, making HTTPS free to use would probably be the best thing that could ever be done for cybersecurity for mankind I guess we'll eventually get there, but unless we get decentralised I don't see how it could be done.
test1235 12y ago
For posterity: http://i.imgur.com/8d7Uama.png http://i.imgur.com/8d7Uama.png
dheera 12y ago
Unfortunately this won't make a big splash, unless MS takes action in solidarity with Google. MSIE and its variants are still the vast majority of the desktop browser market in China, by a huge margin.
- ronnier 12y ago
  MS is in bed with China. Google isn't. Microsoft is allowed to stay in China, Google was kicked out.
  - simple123 12y ago
    China actually is an ISIS country of Communist party
    - helyka 12y ago
      Please explain your reasoning on this. I can't seem to wrap my head around this statement.
    - tuan5 12y ago
      you got brain washed too much.

EdwardDiego 12y ago

Hey mate, your "2011 breach incident" anchor points to nothing in the page. Am I missing something?

danuker 12y ago
It seems to be [here](http://en.wikipedia.org/wiki/Comodo_Group#Controversies http://en.wikipedia.org/wiki/Comodo_Group#Controversies) now.
eyeareque 12y ago
[edit] Let's try this again: https://www.schneier.com/blog/archives/2011/03/comodo_group_is.html https://www.schneier.com/blog/archives/2011/03/comodo_group_... The above link should work. This will teach me to link to an anchor on Wikipedia. [original post] It should have been: https://en.wikipedia.org/wiki/Comodo_Group#Certificate_hacking https://en.wikipedia.org/wiki/Comodo_Group#Certificate_hacki...
- jvoorhis 12y ago
  That doesn't work now either. Playing whacamole with an editor?
  - ishtu 12y ago
    works great for me

scotty79 12y ago

> If you don't the whole system is worthless. The whole system is worthless and it should be replaced with something more like bitcoin. I don't really trust any certificate issuer more than I trust self issued certificate.

coderdude 12y ago
>it should be replaced with something more like bitcoin. What does that even mean?
- feld 12y ago
  it doesn't mean anything; just another parrot
- giovani 12y ago
  He was probably talking about the centralised model used with CAs, and trying to start a discussion about an alternative to the CA model, probably some way of decentralised control, hence the bitcoin reference. Convergence [1] comes to mind. [1] http://convergence.io/ http://convergence.io/
  - dheera 12y ago
    I would be in favor of decentralised as well; nobody should have to pay money to some bunch of trolls just to use encryption; this is a friction point for a lot of newcomers to web development. In fact, making HTTPS free to use would probably be the best thing that could ever be done for cybersecurity for mankind. Make it zero-friction over HTTP, somehow. Perhaps Google might want to sponsor this? :)
    - giovani 12y ago
      > In fact, making HTTPS free to use would probably be the best thing that could ever be done for cybersecurity for mankind I guess we'll eventually get there, but unless we get decentralised I don't see how it could be done.

test1235 12y ago

For posterity: http://i.imgur.com/8d7Uama.png http://i.imgur.com/8d7Uama.png

dheera 12y ago

Unfortunately this won't make a big splash, unless MS takes action in solidarity with Google. MSIE and its variants are still the vast majority of the desktop browser market in China, by a huge margin.

ronnier 12y ago
MS is in bed with China. Google isn't. Microsoft is allowed to stay in China, Google was kicked out.
- simple123 12y ago
  China actually is an ISIS country of Communist party
  - helyka 12y ago
    Please explain your reasoning on this. I can't seem to wrap my head around this statement.
  - tuan5 12y ago
    you got brain washed too much.