3 ms·
>then so can the attacker Maybe, but the attacker can also get their certificate revoked when their activities are discovered.
by superuser2 12y ago
>then so can the attacker
Maybe, but the attacker can also get their certificate revoked when their activities are discovered.
- AnthonyMouse 12y ago...if their activities are discovered. And then the attacker just gets another certificate under a different name, or steals somebody else's certificate. Ignoring, of course, that revocation is totally broken. It cannot simultaneously be easy for anyone to get a certificate and hard for an attacker to get a certificate.