Comment

Comment by Mojah

I'm glad someone noticed, and at the same time it's a shame it took a month before the news actually came out.

I think this demonstrates 2 very major problems with SSL Certificates we have today:

1. Nobody checks which root certificates are currently trusted on your machine(s).

2. Our software vendors can push new Root Certificates in automated updates without anyone knowing about it.

More content on this rant: https://ma.ttias.be/the-broken-state-of-trust-in-root-certif...

parent Mojah 11 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton