“We plan to hide ‘https’ scheme and subdomain ‘www’ in Chrome omnibox in M76”

Re:“We plan to hide ‘https’ scheme and subdomain ‘www’ in Ch... by amfsn on Wednesday July 31, 2019 @04:36AM (#20572611)

Of course they did. When you paid with your card they knew your identity. Unless you were carding which is a pretty serious crime.

[ Parent | on HN ]

Re:“We plan to hide ‘https’ scheme and subdomain ‘www’ in Ch... by logifail on Wednesday July 31, 2019 @05:09AM (#20572737)

> When you paid with your card they knew your identity.

Who's the "they" in that sentence? As it stands, a certificate reseller knows that the Paypal account "[email protected]" paid for a SSL certificate for "www.unrelatedcompany.TLD"

The certificate itself tells you nothing about who paid for it - it doesn't even tell you which email account was used to confirm some level of association with the unrelatedcompany.TLD domain.

[ Parent | on HN ]

Re:“We plan to hide ‘https’ scheme and subdomain ‘www’ in Ch... by amfsn on Wednesday July 31, 2019 @05:20AM (#20572786)

Then PayPal has the data and LE can follow the trail. Because it's about LE being able to tell who actually bought the certificate, telling me end users can't do that is kinda moving the goalposts.

[ Parent | on HN ]

Re:“We plan to hide ‘https’ scheme and subdomain ‘www’ in Ch... by pilsetnieks on Wednesday July 31, 2019 @05:30AM (#20572831)

There are certificate authorities all over the world, and many of them not in jurisdictions that would share data with your law enforcement.

[ Parent | on HN ]

Re:“We plan to hide ‘https’ scheme and subdomain ‘www’ in Ch... by logifail on Wednesday July 31, 2019 @09:15AM (#20574149)

Q1: What kinds of serious crimes involve law inforcement needing to chase up who's behind the purchase of a SSL certificate, anyway?

Q2: Can't the bad guys just buy a pre-paid debit card with cash if they're that desperate to cover their tracks?

[ Parent | on HN ]