Re:The Microsoft Update mechanism has been used to spread ma...
by Spooky23 on Tuesday June 05, 2012 @11:58AM
(#4069167)
This sort of thing (certificate compromise) has happened with open source projects as well.
The downside of trusting certificates is that you're abstracting trust to a point that you (where you == the IT industry) stops questioning who can do what. You trust something absolutely, but that trust is based on lots of people whom you don't know doing the right thing without making mistakes.
The downside of trusting certificates is that you're abstracting trust to a point that you (where you == the IT industry) stops questioning who can do what. You trust something absolutely, but that trust is based on lots of people whom you don't know doing the right thing without making mistakes.