News for hackers. Stuff that matters.

A comment on MITM on HTTPS traffic in Kazakhstan. Parent comment

Re:MITM on HTTPS traffic in Kazakhstan by markovbot on Thursday July 18, 2019 @02:24PM (#20472603)
and that would have to be baked into the CA certificate, not specified when the CA is trusted. I dont want my browser to ask the CA what it's allowed to do, i want to tell it what it's allowed to do
[ Parent | on HN ]
Re:MITM on HTTPS traffic in Kazakhstan by y0ghur7_xxx on Saturday July 20, 2019 @04:10AM (#20484689)
It has to be baked into the CA, so that a browser vendor can check it before inclusion. If the CA specifies domains it is not allowed to sign certificates for, it will not be included.
[ Parent | on HN ]