NetBSD-Users archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Root CAs [was Re: Upgrade 8.2 -> 9.4 breaks cpan?]
> Root C(ertificate)A(uthorities) are a failure and acts of oppression
I don't think they're a failure per se. They do what they're designed
to do very well. Trouble is, it's what the designers want(ed), not
what you (or I) want(ed).
CA-hierarchy-secured communication is a fail for me because it is
completely unable to protect against the actors I am most concerned
about, which are large corporations and governments: the ones who are
the roots of the (so-called) trust hierarchy, the kind of entity which
can easily get certs for *.com and the like.
It's putting the foxes in charge of securing the doors on the henhouse.
/~\ The ASCII Mouse
\ / Ribbon Campaign
X Against HTML mouse%rodents-montreal.org@localhost
/ \ Email! 7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B
Home |
Main Index |
Thread Index |
Old Index