Re:Web browsers drop mysterious company with ties to U.S. mi...
by jamincan on Thursday December 01, 2022 @02:09PM
(#33821086)
Trust would seem to be the key word here. How can you trust an entity in one context when they have proven themselves untrustworthy in another?
Re:Web browsers drop mysterious company with ties to U.S. mi...
by Ajedi32 on Monday December 05, 2022 @11:38AM
(#33867861)
> can you trust an entity in one context when they have proven themselves untrustworthy in another
We do that all the time. If, rather than TrustCor being associated with a company making malware we'd instead found out the company's CEO had cheated on his wife, would that be grounds for removing them from the root certificate store? Context matters.
Playing devil's advocate: Why not? I mean yes, obviously if you end up in jail that might interfere with your ability to operate a CA (or any company for that matter). But barring that, as long as they haven't done anything to affect the security or proper operation of the CA certificate itself, why is that a basis for removing them from root stores? To the best of my knowledge this action is unprecedented.