News for hackers. Stuff that matters.

A comment on Intent to Deprecate and Remove: Trust in Existing Symantec-Issued Certificates. Parent comment

Re:Intent to Deprecate and Remove: Trust in Existing Symante... by gcp on Thursday March 23, 2017 @01:31PM (#13941950)
I don't understand how EV vs DV factors into certificate pinning here.
[ Parent | on HN ]
Re:Intent to Deprecate and Remove: Trust in Existing Symante... by aianus on Thursday March 23, 2017 @02:18PM (#13942503)
If we had a DV cert and pinned the DV root then the barrier for an attacker is a lot lower. They just need to jack our DNS and get their own automated DV cert issued quick.
[ Parent | on HN ]