MiWThrowaway834

5 ms·

1. 1.▲
   by MiWThrowaway834 12y ago

   Ideally the certificate would be worth, or have a value associated greater than that of the transactions being handled by the site it is protecting; Then the attacker has more to gain by invalidating the certificate than intercepting traffi
2. 2.▲
   by MiWThrowaway834 12y ago

   Ok, so the date on this paper is 2014, but wasn't this proposed at least 2 years ago? I recall it being proposed as a countermeasure to the Iranian Google cert incident.
3. 3.▲
   by MiWThrowaway834 12y ago

   doh! embarassed. your right, Ben Laurie. i recall agl speaking about this recently, thats the association. Appologies to Ben and Adam :-)