News for hackers. Stuff that matters.

A comment on Mozilla moves to distrust the TrustCor CA. Parent comment

Re:Mozilla moves to distrust the TrustCor CA by snoopy_telex on Thursday December 01, 2022 @01:20PM (#33820264)
Don’t you have to trust the CA to actually log all the certs they issue? What’s to stop a rogue CA from logging all but a few key certs?
[ Parent | on HN ]
Re:Mozilla moves to distrust the TrustCor CA by pifm_guy on Sunday December 04, 2022 @04:47PM (#33858280)
Anyone else can log a cert too. There was talk of Chromium logging any cert that chains to a public root that they find un-logged.
[ Parent | on HN ]