Apple's response to the WoSign incidents

Re:Apple's response to the WoSign incidents by jedberg on Saturday October 01, 2016 @01:53PM (#12619021)

And yet, unless you go through the effort of removing every trusted CA from your browser, you implicitly trust them because Mozilla/Google/etc. do.

And thus why the CA system is broken in a nutshell.

[ Parent | on HN ]

Re:Apple's response to the WoSign incidents by mixedCase on Saturday October 01, 2016 @10:45PM (#12620835)

>And thus why the CA system is broken in a nutshell.

I wouldn't call it broken. From what I see on Linux and Windows, Chrom[e|ium] relies on the system's trusted certificates. You always have the last says on who's in and who's out.

EDIT: Just checked, the Chromium-specific trusted CAs can be revoked through its configuration interface, doesn't just rely on system certs. Important detail, but still, user has the last word.

[ Parent | on HN ]