News for hackers. Stuff that matters.

A comment on Maintaining Digital Certificate Security. Parent comment

Re:Maintaining Digital Certificate Security by mjs on Tuesday March 24, 2015 @07:43AM (#9255957)
> It's the golden unsolved, perhaps unsolvable problem in crypto.

Sorry, perhaps my question wasn't clear. I wasn't asking about MITM in the general case, I was asking about this particular case. The certificate chain for Hacker News seems to go AddTrust -> COMODO -> Another COMODO -> *.ycombinator.com. So in this case, if you're MITM'd by MCS Holdings, is MCS Holdings going to be part of the chain (after a CNNIC)?

[ Parent | on HN ]
Re:Maintaining Digital Certificate Security by iancarroll on Tuesday March 24, 2015 @12:34PM (#9257662)
Yes, the chain would be different. MCS Holding cannot become Comodo (Comodo = AddTrust, btw), so the chain would change to CNNIC -> MCS Holdings -> *.ycombinator.com.
[ Parent | on HN ]