News for hackers. Stuff that matters.
Re:Intent to Deprecate and Remove: Trust in Existing Symante... by CountSessine on Thursday March 23, 2017 @07:02PM (#13945134)
BoA could absolutely do all the things you just mentioned, but all of them are more difficult than simply replacing their certificate using Comodo or some other trusted root CA.

That depends on the design of the site and their business policies. I agree though - for any sensible organization switching certs is going to be easier. But if that was really the case here, why were they asking Symantec for special favours?

There are no comments on this comment yet.