Launching in 2015: A Certificate Authority to Encrypt the Entire Web

Re:Launching in 2015: A Certificate Authority to Encrypt the... by hawleyal on Tuesday November 18, 2014 @01:42PM (#8625478)

Because encryption with SSL without trust of the SSL cert is meaningless. It might as well be not encrypted.

[ Parent | on HN ]

Re:Launching in 2015: A Certificate Authority to Encrypt the... by rpdillon on Tuesday November 18, 2014 @03:20PM (#8626078)

I wonder if this is true.

If there's a man in the middle, then they can read the traffic. But others still have a problem.

With HTTP, you know that everyone can read the traffic.

I think unsigned certs, especially with pinning, can be used to make wholesale collection of internet traffic vastly more difficult.

[ Parent | on HN ]

Re:Launching in 2015: A Certificate Authority to Encrypt the... by hawleyal on Friday November 21, 2014 @11:36AM (#8641982)

Now you are talking about obscurity, not security. In my opinion.

[ Parent | on HN ]