Next privilege 5 Rep.
Participate in meta
0 0 0
~357 people reached

  • 0 posts edited
  • 0 helpful flags
  • 0 votes cast
comment How is SSL secure from rogue Certificate Authorities?
@CodesInChaos: Well, yeah, but my browser won't know which CA is supposed to be issuing the cert. It'll just check validity, and then merrily pass all my information along. And for practical purposes, I'm not going to read every cert by hand, and in theory if I did, each company would have to list who their CA is somewhere for me to look it up, and I'm pretty sure they don't... Alright, well, that's depressing, I suppose.