|visits||member for||1 year, 5 months|
|seen||Jun 25 '13 at 10:55|
How is SSL secure from rogue Certificate Authorities?
@CodesInChaos: Well, yeah, but my browser won't know which CA is supposed to be issuing the cert. It'll just check validity, and then merrily pass all my information along. And for practical purposes, I'm not going to read every cert by hand, and in theory if I did, each company would have to list who their CA is somewhere for me to look it up, and I'm pretty sure they don't... Alright, well, that's depressing, I suppose.