Re:Marking HTTP as Non-Secure
by coldtea on Saturday December 13, 2014 @04:49AM
(#8744752)
Yeah, because the NSA and such don't have access to certificate authorities in the first place, right?
[ Parent
| on HN ]
Which is why you are supposed to throw out untrustable Certificate Authorities.
In the same way as TURKTRUST was thrown out by all vendors a few years ago, nowadays you should throw out VeriSign and GoDaddy just as well.
>In the same way as TURKTRUST was thrown out by all vendors a few years ago, nowadays you should throw out VeriSign and GoDaddy just as well.
Have vendors done it? Because users will surely not bother.
Besides, what makes the other CAs' trustworthy?
They are just some companies, with offices, CEOs, etc. Can have ties to the government, deals, pressure on them, or even just plain planted engineers...