News for hackers. Stuff that matters.

A comment on Thai government to MITM all internet communications. Parent comment

Re:Thai government to MITM all internet communications by tomjen3 on Monday May 30, 2016 @03:41PM (#11802740)
How the fuck did they get that and why is Symantec still included in common roots?

Thats literally the one thing you aren't allowed to do as a CA.

[ Parent | on HN ]
Re:Thai government to MITM all internet communications by msbarnett on Tuesday May 31, 2016 @07:10PM (#11810992)
> why is Symantec still included in common roots?

Because they (and the companies they own, like Verisign), are the root of about 30-40% of all active, web-visible ssl certs at the moment.

No browser maker, even Google is going to break that much of the web over one shady intermediate cert. The consequences for users are too high and too many people are willing to excuse it because it's "only" a pathlen=0 and it would be noticed if used en masse so it's "only" useful for targeted attacks by state-actor clients.

[ Parent | on HN ]