LWN.net Logo

So many trusted authorities

So many trusted authorities

Posted Feb 5, 2010 1:26 UTC (Fri) by giraffedata (subscriber, #1954)
In reply to: So many trusted authorities by rahulsundaram
Parent article: Mozilla and CNNIC

Even if the prompts aren't too big a burden, knowing whether to answer yes or no is.

There's a lot of value in the Firefox developers screening these guys for me.

Bear in mind that the penalty for saying "no" to a CA that is actually trustworthy and legitimate (perhaps because you've never heard of it) is high: you don't get to use the web site you wanted to use.

I'm not sure any of it really matters in the big picture, though. The Chinese government can just use a self-signed certificate. In browsers I've seen, that results in a prompt to the user that, to 99% of them, is gobbledygook that boils down to "do you want to go to the web site you requested or not?"


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds