News for hackers. Stuff that matters.

A comment on Intent to Deprecate and Remove: Trust in Existing Symantec-Issued Certificates. Parent comment

Re:Intent to Deprecate and Remove: Trust in Existing Symante... by cpncrunch on Thursday March 23, 2017 @04:42PM (#13944062)
>Symantec is at the clear disadvantage.

I'm not sure how they are at a disadvantage if they have supplied 30% of in-use certificates, and are responsible for 42% of all validations.

While I don't condone Symantec's behaviour, I think google is being a bit hypocritical here. Have you ever tried reporting gmail spammers to google?

[ Parent | on HN ]
Re:Intent to Deprecate and Remove: Trust in Existing Symante... by SEJeff on Thursday March 23, 2017 @04:47PM (#13944105)
Sans maybe spear phishers, spam campaigns aren't generally ran by oppressive governments. MiTM certs with bogus certs absolutely are, and could result in jail / death.

EFF ftw!

https://ssd.eff.org/

[ Parent | on HN ]
Re:Intent to Deprecate and Remove: Trust in Existing Symante... by cpncrunch on Thursday March 23, 2017 @07:10PM (#13945183)
I'm simply pointing out that both companies seem to think they can do what they want, due to having such large market share.

Do we know that Symantec is being malicious, or just lazy like Google's response to spam?

[ Parent | on HN ]
Re:Intent to Deprecate and Remove: Trust in Existing Symante... by williamscales on Thursday March 23, 2017 @07:49PM (#13945412)
This is a real security issue and spam isn't.
[ Parent | on HN ]