News for hackers. Stuff that matters.

A comment on SSL And The Future Of Authenticity. Parent comment

Re:SSL And The Future Of Authenticity by twoodfin on Sunday April 21, 2013 @10:19AM (#5584907)
How does it stop me from saying "Bank of America's public key is <my public key>"?
[ Parent | on HN ]
Re:SSL And The Future Of Authenticity by Dylan16807 on Sunday April 21, 2013 @01:04PM (#5585445)
Nothing. The same way you can go buy iamthebankofamerica.com for a couple bucks and put all the keys you like on it. But once you go to the actual Bank of America domain record you'll get back the real certificates.
[ Parent | on HN ]
Re:SSL And The Future Of Authenticity by wyager on Sunday April 21, 2013 @10:09PM (#5587383)
BoA would have to buy the rights to that name from whoever got it before them.
[ Parent | on HN ]