News for hackers. Stuff that matters.

A comment on For sale: Trusted root SSL CA signing certificate. Parent comment

Re:For sale: Trusted root SSL CA signing certificate by agl on Saturday February 09, 2013 @04:15PM (#5194030)
It's a question of terminology, but when groups like Chrome Security, Mozilla etc talk about MITM certificates and that they are forbidden, we mean those that are used for intercepting traffic.
[ Parent | on HN ]
Re:For sale: Trusted root SSL CA signing certificate by marshray on Saturday February 09, 2013 @04:30PM (#5194093)
I think this is a case where the precise terminology is critical.

The only way to know how a certificate may or may not "be used" is by looking at how the source code of all client applications to see how they will interpret it.

How many of the cases of trusted-root chained MITM seen in the wild (Iran, Turkey) were prevented by the business agreements making MITM "forbidden"?

[ Parent | on HN ]