News for hackers. Stuff that matters.
Re:How to distrust a CA without any certificate errors by bell-cot on Friday March 07, 2025 @07:23AM (#43289587)
This is often cited as the reason (but there are plenty more):

https://en.wikipedia.org/wiki/Man-in-the-middle_attack

If the CA's are doing their jobs...then FirstBank.com can get a cert for their web site. But the gang who rooted a bunch of home routers (or hacked a WiFi setup, or whatever) can't.

If not...then yeah, that's the problem.

There are no comments on this comment yet.