News for hackers. Stuff that matters.
Re:Launching in 2015: A Certificate Authority to Encrypt the... by jessaustin on Tuesday November 18, 2014 @09:14PM (#8627837)
Why would one store them there? Why not just use them to sign other keys that are actually used in online systems?
Re:Launching in 2015: A Certificate Authority to Encrypt the... by xorcist on Wednesday November 19, 2014 @08:48AM (#8629944)
No, the question is what to do when you need to rotate them. Because that need will arise somewhere, globally, if we were to run the secure web on trust-on-first-use.

It's not interesting why someone hypothetically did get their root keys compromised, it's interesting how the proposed system would cope with it.

(Downvoting the question is not really a web scale way to build a global trust system.)