Re:Comodo will just issue you an SSL cert for anyone
by tptacek on Wednesday December 31, 2008 @01:37AM
(#415224)
Everything you put in the footnote there? That's how SSL actually works. Your computer shipped with a browser (a seperate communications channel) with trusted anchor keys.
[ Parent
| on HN ]
Re:Comodo will just issue you an SSL cert for anyone
by jerf on Wednesday December 31, 2008 @11:22AM
(#415596)
No. I'm saying, the trusted anchor keys aren't trusted. You think they're trusted, but they aren't. The trust necessary for SSL to be truly secure can't exist in the real world. If you're not checking the site's key directly with no reference to the trusted keys, you don't have "security".