News for hackers. Stuff that matters.
Re:CA Comodo used broken OCR and issued certificates to the ... by icebraining on Friday October 21, 2016 @07:15PM (#12765727)
Just like you do with ssh: you ask the site administrator.

How?

CAs give a false sense of security. We need to move off this model.

Maybe, but not by adopting the politician's syllogism. We should only move to a better model. As easy as it may be, it's still slightly harder to get a CA to sign a cert for a domain you don't control than it is to sign them yourself, and that shouldn't be dismissed.

There are no comments on this comment yet.