Re:Maintaining Digital Certificate Security
by JoshTriplett on Monday March 23, 2015 @08:36PM
(#9254239)
What problems, precisely? Sure, it would prevent current CAs from selling sub-CA certificates without coordinating with browser vendors. That's the point. What's a legitimate use case for doing so?
[ Parent
| on HN ]
Yes, but the point is that this "coordinating" can be done without users having to update browsers themselves.
Re:Maintaining Digital Certificate Security
by JoshTriplett on Monday March 23, 2015 @08:52PM
(#9254295)
All the major browsers have automatic updates these days. And if the coordination doesn't include a browser whitelist, it has no teeth.