News for hackers. Stuff that matters.

A comment on Launching in 2015: A Certificate Authority to Encrypt the Entire Web. Parent comment

Re:Launching in 2015: A Certificate Authority to Encrypt the... by sarciszewski on Tuesday November 18, 2014 @08:12PM (#8627577)
Authenticated and encrypted? That throws a wrench into things.
[ Parent | on HN ]
Re:Launching in 2015: A Certificate Authority to Encrypt the... by jessaustin on Tuesday November 18, 2014 @09:09PM (#8627813)
The authentication provided by the extant PKI system is much weaker than the encryption provided. Any CA can do anything it wants, and browsers trust lots of them.
[ Parent | on HN ]