News for hackers. Stuff that matters.

A comment on Certified Malice. Parent comment

Re:Certified Malice by pokemon-trainer on Monday January 16, 2017 @08:02PM (#13414402)
That's very much a libertarian style nuclear option to remove a CA from the root store. Why can't the industry work out a fine to pay an ICANN-like org for root CAs when it happens?
[ Parent | on HN ]
Re:Certified Malice by Buge on Monday January 16, 2017 @09:18PM (#13414686)
A large percent of phishing sites are hacked wordpress sites.

So if a CA offers a certificate to a legitimate wordpress site, which then proceeds to let itself get hacked and host a phishing page, that CA now has to pay a fine?

[ Parent | on HN ]