News for hackers. Stuff that matters.

A comment on Final Removal of Trust in WoSign and StartCom Certificates. Parent comment

Re:Final Removal of Trust in WoSign and StartCom Certificates by walrus01 on Friday July 07, 2017 @07:54PM (#14723210)
it is frankly astonishing how many browsers/OS platforms ship by default trusting all of the major mainland chinese root CAs.
[ Parent | on HN ]
Re:Final Removal of Trust in WoSign and StartCom Certificates by Tinyyy on Saturday July 08, 2017 @01:14AM (#14724191)
It’s astonishing because somehow the Chinese deserve to be treated differently from everyone else?
[ Parent | on HN ]
Re:Final Removal of Trust in WoSign and StartCom Certificates by walrus01 on Saturday July 08, 2017 @02:37AM (#14724412)
Because the Chinese government has a well documented track record of attempting to MITM SSL, and if your system trust the root CA... game over.

https://www.google.com/search?q=china+ssl+mitm&ie=utf-8&oe=u...

[ Parent | on HN ]