News for hackers. Stuff that matters.

A comment on DNSSEC KSK rollover breaks DNS resolution for .nz domains. Parent comment

Re:DNSSEC KSK rollover breaks DNS resolution for .nz domains by teddyh on Tuesday May 30, 2023 @08:01AM (#36123771)
Even if you trust the current CAs (all of them) to not intentionally issue bad certificates, you must also trust all of them not to have their systems broken into. If even one CA gets compromised, the hackers can issue certificates for any name.
[ Parent | on HN ]

There are no comments on this comment yet.