News for hackers. Stuff that matters.

A comment on Microsoft’s Revocation of the Verisign Class 3 Public Primary G5 Root Cert. Parent comment

Re:Microsoft’s Revocation of the Verisign Class 3 Public Pri... by shartte on Thursday August 24, 2023 @04:56PM (#37254442)
Hashes of known good drivers should be whitelisted explicitly if they are known to have been signed correctly before revocation. Direct trust should trump a PKI here.
[ Parent | on HN ]

There are no comments on this comment yet.