IssueRaiser

This is not news.

This is not news. The CA system is broken by design. It's been this way from the start. Not just on OSX but on all platforms. Your browser blindly trusts a list of a few hundred CA's, any of which can impersonate any SSL site you visit at any time (except for the chosen few that use certificate pinning) Many of the biggest CA's (e.g. Verisign) are under government control.

Posted by moe on Feb 23, 2015, 10:20 AM

Tags

Related issues

Raise real-world problems, find people facing the same issue, and discuss solutions.8,000 issues0 comments

reliability (Other)

This is not news.

moeFeb 23, 2015, 10:20 AM

This is not news. The CA system is broken by design. It's been this way from the start. Not just on OSX but on all platforms. Your browser blindly trusts a list of a few hundred CA's, any of which can impersonate any SSL site you visit at any time (except for the chosen few that use certificate pinning) Many of the biggest CA's (e.g. Verisign) are under government control.

Comments (0)

No comments yet. Start the discussion.

Comment on this issue