Comment

Comment by theonlybutlet

So basically:

Governments are being given authority to create dodgey certificates,

Browsers can't take it down if discovered unless they have evidence it's being used and will be harmful, and

Browsers need to advise and wait for the requisite approval [of authorities] for when the browser can take it down (i.e. the authorities can decide how long it stays up).

Or am I missing something?

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton