News for hackers. Stuff that matters.

A comment on Microsoft silently adds Amazon root certificates to its CTL. Parent comment

Re:Microsoft silently adds Amazon root certificates to its CTL by ben0x539 on Friday January 22, 2016 @03:48AM (#10951570)
Isn't adding new root certificates basically the same attack vector as just turning off or routing around your SSL? Who can mess with your certificate store who can't also just run whatever code on your machine?
[ Parent | on HN ]

There are no comments on this comment yet.