News for hackers. Stuff that matters.

A comment on Mozilla to Certificate Authorities: no subordinate CAs for traffic interception. Parent comment

Re:Mozilla to Certificate Authorities: no subordinate CAs fo... by joshtalon on Saturday February 18, 2012 @03:10AM (#3606216)
They can do public-key pinning like Chrome does (for example, they embed the "mail.google.com" public key into Chrome itself, and verify that it's the certificate you're TLS'ing to.
[ Parent | on HN ]

There are no comments on this comment yet.