IssueRaiser

Your browser, or trusted cert provider, should just have a clear policy that once trust is broken, according to well defined rules, the c...

Your browser, or trusted cert provider, should just have a clear policy that once trust is broken, according to well defined rules, the cert is auto-revoked with no appeal. Then it is only a matter of executing the policy, not an ex post facto political game. If your trusted source does not have such a policy, drop them.

Posted by jsprogrammer on Apr 2, 2015, 7:02 AM

Tags

Related issues

Raise real-world problems, find people facing the same issue, and discuss solutions.7,500 issues0 comments

reliability (Other)

Your browser, or trusted cert provider, should just have a clear policy that once trust is broken, according to well defined rules, the c...

jsprogrammerApr 2, 2015, 7:02 AM

Your browser, or trusted cert provider, should just have a clear policy that once trust is broken, according to well defined rules, the cert is auto-revoked with no appeal. Then it is only a matter of executing the policy, not an ex post facto political game. If your trusted source does not have such a policy, drop them.

Comments (0)

No comments yet. Start the discussion.

Comment on this issue