News for hackers. Stuff that matters.

A comment on Intent to Deprecate and Remove: Trust in Existing Symantec-Issued Certificates. Parent comment

Re:Intent to Deprecate and Remove: Trust in Existing Symante... by SEJeff on Thursday March 23, 2017 @04:47PM (#13944105)
Sans maybe spear phishers, spam campaigns aren't generally ran by oppressive governments. MiTM certs with bogus certs absolutely are, and could result in jail / death.

EFF ftw!

https://ssd.eff.org/

[ Parent | on HN ]
Re:Intent to Deprecate and Remove: Trust in Existing Symante... by cpncrunch on Thursday March 23, 2017 @07:10PM (#13945183)
I'm simply pointing out that both companies seem to think they can do what they want, due to having such large market share.

Do we know that Symantec is being malicious, or just lazy like Google's response to spam?

[ Parent | on HN ]
Re:Intent to Deprecate and Remove: Trust in Existing Symante... by williamscales on Thursday March 23, 2017 @07:49PM (#13945412)
This is a real security issue and spam isn't.
[ Parent | on HN ]