Comment

Comment by pishpash

Isn't the whole point of this to decide what "shady" CA's to trust? If a Russian site bothered to get signed in Greece, some people will trust the site, and some people will distrust the Greek CA's. That's how trust works.

You can add other options too, "Trust for 30 days" or something. I wish SSH known hosts has an auto-expunge.

parent pishpash 3 days ago

No comments yet

Be the first to share your thoughts.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton