21–22 of 22 posts
Surprising to see so many public institutions from Germany are certificate authorities. The linked PDF shows a picture of those 600+ authorities. https://www.eff.org/files/colour_map_of_CAs.pdf Even the very small university I went to (their organization is terrible by the way) is a certificate authority. How is that even possible?
Surprising to see so many public institutions from Germany are certificate authorities. The linked PDF shows a picture of those 600+ authorities. https://www.eff.org/files/colour_map_of_CAs.pdf Even the very small university I went to (their organization is terrible by the way) is a certificate authority. How is that even possible?
Everyone can be a certificate authorithy. The problem is that browsers only recognize a small number of authorities and display a scary message for others.
Quote:
"Break into any Certificate Authority (or compromise the web applications that feed into it). As we learned from the SSL Observatory project, there are 600+ Certificate Authorities that your browser will trust; the attacker only needs to find one of those 600 that she is capable of breaking into."