News for hackers. Stuff that matters.

A comment on CNNIC's response to Google. Parent comment

Re:CNNIC's response to Google by jsprogrammer on Thursday April 02, 2015 @03:02AM (#9309034)
Your browser, or trusted cert provider, should just have a clear policy that once trust is broken, according to well defined rules, the cert is auto-revoked with no appeal. Then it is only a matter of executing the policy, not an ex post facto political game.

If your trusted source does not have such a policy, drop them.

[ Parent | on HN ]
Re:CNNIC's response to Google by bigiain on Thursday April 02, 2015 @06:13AM (#9309682)
Do you have any suggestions about where to look for such a "trusted source"?

I fear my comfortable life with iOS/Android/OSX/Windows/mainstram-Linux OSen at my bidding in various devices and niches, would need to change radically to approach that ideal.

[ Parent | on HN ]