Re:The foundation of a more secure web: Google Trust Services
by JoshTriplett on Thursday January 26, 2017 @04:52PM
(#13495567)
You'd need a backup plan for sites that have transferred ownership, or for sites that needed to revoke the old key due to compromise. And once you have that backup plan, how would you decide whether to care if that additional signature exists?
[ Parent
| on HN ]
Re:The foundation of a more secure web: Google Trust Services
by infogulch on Thursday January 26, 2017 @05:00PM
(#13495635)
But ownership change and compromise should be communicated to the user. Maybe an "Unverified Identity" shows up for a while and triggers stronger checks in the browser for CT and revocation lists.