News for hackers. Stuff that matters.

A comment on CA Comodo used broken OCR and issued certificates to the wrong people. Parent comment

Re:CA Comodo used broken OCR and issued certificates to the ... by corecoder on Friday October 21, 2016 @02:28PM (#12763198)
Well, unless apps authors are writing their HTTPS clients from scratch, I suppose major mobile OSes provided HTTP client API functions do actually check certificates?
[ Parent | on HN ]
Re:CA Comodo used broken OCR and issued certificates to the ... by advisedwang on Friday October 21, 2016 @03:26PM (#12763781)
I think chetanahuja is saying apps don't have to rely on CAs. They can distribute a single trusted certificate, only trust a single CA or use key pinning.
[ Parent | on HN ]