News for hackers. Stuff that matters.

A comment on Mozilla moves to distrust the TrustCor CA. Parent comment

Re:Mozilla moves to distrust the TrustCor CA by pifm_guy on Thursday December 01, 2022 @05:27AM (#33814507)
> Everyone agrees that no evidence of mal-issued certificates exists.

This is one thing CT logs are useful for. As soon as logging certificates to a public log becomes commonplace, then misissued certificates can't be used in private without a high chance of the world being told about what's going on.

[ Parent | on HN ]
Re:Mozilla moves to distrust the TrustCor CA by j33zusjuice on Thursday December 01, 2022 @07:43AM (#33815509)
Nice. I had no idea such a thing existed, tbh.
[ Parent | on HN ]
Re:Mozilla moves to distrust the TrustCor CA by snoopy_telex on Thursday December 01, 2022 @01:20PM (#33820264)
Don’t you have to trust the CA to actually log all the certs they issue? What’s to stop a rogue CA from logging all but a few key certs?
[ Parent | on HN ]
Re:Mozilla moves to distrust the TrustCor CA by pifm_guy on Sunday December 04, 2022 @04:47PM (#33858280)
Anyone else can log a cert too. There was talk of Chromium logging any cert that chains to a public root that they find un-logged.
[ Parent | on HN ]