3 ms·
> Most things based on TLS will continue to work, if every computer has to have a government CA certificate installed to allow MITMs. Hopefully HTTP Public Key
by cesarb 11y ago
> Most things based on TLS will continue to work, if every computer has to have a government CA certificate installed to allow MITMs. Hopefully HTTP Public Key Pinning will become more prevalent if this looks likely to happen.
HPKP is bypassed for locally-installed CA certificates (if you don't want that, set security.cert_pinning.enforcement_level to 2 on Firefox).