4 ms·
>And 4096 bit, does that help at all? If a CA is 2048 then doesn't that max out the trust chain? Not if you use certificate pinning, but otherwise yes, you'd o
by rjaco31 11y ago
>And 4096 bit, does that help at all? If a CA is 2048 then doesn't that max out the trust chain?
Not if you use certificate pinning, but otherwise yes, you'd only have to crack the weakest cert of the chain (or well, of any chain actually, the CA system being what it is..)
- bandrami 11y agoyou'd only have to crack the weakest cert of the chain (or well, of any chain actually, the CA system being what it is..) Right... so I don't think anyone's going to bother trying to crack a 2048-bit cipher either when it's much easier to just bribe/blackmail/torture a single employee of one of the hundreds of organizations in ca-certificates.
- rjaco31 11y agoYou don't even have to "bribe/blackmail/torture" them, a subpoena will be sufficient in most countries.