News for hackers. Stuff that matters.

A comment on Show HN: TinyCert – Certificates as a service.

Re:Show HN: TinyCert – Certificates as a service by tatterdemalion on Sunday September 14, 2014 @02:34AM (#8314667)
This obviously should not be added to the list of trusted CAs in any browser, and these certs should not be used in the public web. Unfortunately, neither should many certificate authorities be trusted.

https://www.youtube.com/watch?v=pDmj_xe7EIQ

[ Parent | on HN ]
Re:Show HN: TinyCert – Certificates as a service by shdon on Sunday September 14, 2014 @07:47AM (#8315021)
Just to clarify: there is not 1 root certificate for all of the TinyCert generated certificates. There are root certificates for every single account. I did this intentionally to ensure that nobody would be careless enough to trust such a root and thus implicitly trust every TinyCert certificate everywhere. Basically, only the people who created their own CA through TinyCert have any business installing their root certificates (and only theirs!) into their browsers.
[ Parent | on HN ]