News for hackers. Stuff that matters.

A comment on Why I stopped using StartSSL (Hint: it involves a Chinese company). Parent comment

Re:Why I stopped using StartSSL (Hint: it involves a Chinese... by baby on Tuesday February 16, 2016 @02:05AM (#11108334)
Baidu is like Google but in China. They must already have a certificate in any browser's trust store. And also, think about all the keys contained in AWS servers, and AWS is in America...
[ Parent | on HN ]
Re:Why I stopped using StartSSL (Hint: it involves a Chinese... by profmonocle on Tuesday February 16, 2016 @02:13AM (#11108353)
Using a local CA seems like a bad way for a government to compromise HTTPS. If they got caught, that CA would get demolished practically overnight when the browser makers remove it from the trust stores. Compromising a foreign CA seems like a much better strategy. (Although not nearly as simple)
[ Parent | on HN ]