The foundation of a more secure web: Google Trust Services
security.googleblog.com
The foundation of a more secure web: Google Trust Services
1–10 of 178 posts
Re: The foundation of a more secure web: Google Trust Services
#2I think SSL certificates need to be replaced. Security can NOT be designed with the 'good guy' in mind. if it can be broken at all we need an alternative.
Re: The foundation of a more secure web: Google Trust Services
#3I have no love for most the major CAs I've interacted with, but this feels wrong, though I can't quite pin point why.
Perhaps just a general feeling that all the internet eggs are being put, one by one, in one single alphabet basket.
Re: The foundation of a more secure web: Google Trust Services
#4"If you are building products that intends to connect to a Google property moving forward you need to at a minimum include the above Root Certificates."
The foundation of a more secure web apparently requires you to trust Google with the entire internet, using their properties as leverage to force it to be so.
Re: The foundation of a more secure web: Google Trust Services
#5I think SSL certificates need to be replaced. Security can NOT be designed with the 'good guy' in mind. if it can be broken at all we need an alternative.
The certificates are OK.
The issue is the way they are signed and distributed.
Lots of issues with the current PK infrastructure is limited by the certificate transparency.
Re: The foundation of a more secure web: Google Trust Services
#6I love that you can just buy a CA and devices will trust the new owner. That’s not messed up or anything.
Re: The foundation of a more secure web: Google Trust Services
#7"If you are building products that intends to connect to a Google property moving forward you need to at a minimum include the above Root Certificates." The foundation of a more secure web apparently requires you to trust Google with the entire internet, using their properties as leverage to force it to be so.
You may want to look into certificate transparency and who's supporting it.
Re: The foundation of a more secure web: Google Trust Services
#8"If you are building products that intends to connect to a Google property moving forward you need to at a minimum include the above Root Certificates." The foundation of a more secure web apparently requires you to trust Google with the entire internet, using their properties as leverage to force it to be so.
[deleted]
Re: The foundation of a more secure web: Google Trust Services
#9I have no love for most the major CAs I've interacted with, but this feels wrong, though I can't quite pin point why. Perhaps just a general feeling that all the internet eggs are being put, one by one, in one single alphabet basket.
Let's hope they stick to publishing all certificates into the certificate transparency list (Merkle tree).
Re: The foundation of a more secure web: Google Trust Services
#10"If you are building products that intends to connect to a Google property moving forward you need to at a minimum include the above Root Certificates." The foundation of a more secure web apparently requires you to trust Google with the entire internet, using their properties as leverage to force it to be so.
[deleted]