News for hackers. Stuff that matters.

A comment on Is HTTP Public Key Pinning Dead?. Parent comment

Re:Is HTTP Public Key Pinning Dead? by jb613 on Tuesday September 06, 2016 @12:50PM (#12437359)
You are underestimating 1) the number of CA's embedded in your browser, 2) how easy it is to get one of those CA's to issue a cert for someone else's domain.
[ Parent | on HN ]

There are no comments on this comment yet.