News for hackers. Stuff that matters.

A comment on Launching in 2015: A Certificate Authority to Encrypt the Entire Web. Parent comment

Re:Launching in 2015: A Certificate Authority to Encrypt the... by foxylad on Tuesday November 18, 2014 @07:55PM (#8627523)
> I can substitute/add/send...

Only if you control any of the infrastructure. If you do, then you can make my life a misery anyway, encrypted or not.

[ Parent | on HN ]
Re:Launching in 2015: A Certificate Authority to Encrypt the... by sarciszewski on Tuesday November 18, 2014 @08:12PM (#8627577)
Authenticated and encrypted? That throws a wrench into things.
[ Parent | on HN ]
Re:Launching in 2015: A Certificate Authority to Encrypt the... by jessaustin on Tuesday November 18, 2014 @09:09PM (#8627813)
The authentication provided by the extant PKI system is much weaker than the encryption provided. Any CA can do anything it wants, and browsers trust lots of them.
[ Parent | on HN ]