News for hackers. Stuff that matters.
Re:Launching in 2015: A Certificate Authority to Encrypt the... by jbinto on Tuesday November 18, 2014 @12:08PM (#8624873)
Yes. That's not perfect. But it raises the bar for forgery to "can sign certificates as a root authority", which is still fairly high. (e.g. I can't do it, and neither can you.) It stops coffee shop/hotel wifi operators and mobile providers from injecting content into your session.

If we encourage users to blindly accept self-signed certificates (giving us end-to-end encryption but sacrificing identification), nothing would stop those actors from altering your HTTPS sessions as easily as they alter your HTTP sessions today. It's throwing the baby out with the bathwater.

Re:Launching in 2015: A Certificate Authority to Encrypt the... by M2Ys4U on Tuesday November 18, 2014 @12:56PM (#8625178)
You don't need a CA system to solve that problem, though. Take, for example, Convergence[0] which uses a notary system in place of the CA system.

[0] http://convergence.io