Re:Launching in 2015: A Certificate Authority to Encrypt the...
by SXX on Tuesday November 18, 2014 @05:11PM
(#8626714)
Fake certificate for Google wouldn't work in Chrome at least. There is certificate pinning already.
[ Parent
| on HN ]
Re:Launching in 2015: A Certificate Authority to Encrypt the...
by userbinator on Tuesday November 18, 2014 @10:38PM
(#8628105)
That is completely ineffective if they get Google to cooperate and issue an update that pins the new cert - and due to how automatic updates work, the majority of users will be completely oblivious, and those who do notice the new certificate won't find it any more suspicious than any other certificate update.