Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A Brazilian CA trusted only by Microsoft has issued a certificate for google.com

follow.agwa.name

Post reply on HN
Print view View original

1–10 of 233 posts

Re: A Brazilian CA trusted only by Microsoft has issued a certificate for google.com

#2

Post by danpalmer »

This is a bad look. I expected the result would be Chrome and Firefox dropping trust for this CA, but they already don't trust this CA. Arguably, Microsoft/Windows trusting a CA that the other big players choose not to trust is an even worse look for Microsoft.

Re: A Brazilian CA trusted only by Microsoft has issued a certificate for google.com

#7

Post by jsheard »

danpalmer wrote: post #2

This is a bad look. I expected the result would be Chrome and Firefox dropping trust for this CA, but they already don't trust this CA. Arguably, Microsoft/Windows trusting a CA that the other big players choose not to trust is an even worse look for Microsoft.

What is even the point of a web CA that isn't trusted by all of the major players? Is there one?

Re: A Brazilian CA trusted only by Microsoft has issued a certificate for google.com

#8

Post by beeflet »

danpalmer wrote: post #2

This is a bad look. I expected the result would be Chrome and Firefox dropping trust for this CA, but they already don't trust this CA. Arguably, Microsoft/Windows trusting a CA that the other big players choose not to trust is an even worse look for Microsoft.

It's not just a bad look, it's bad period.

Re: A Brazilian CA trusted only by Microsoft has issued a certificate for google.com

#9

Post by altairprime »

ruined wrote: post #6
noitpmeder wrote: post #4

Not clear (to me) in the original post -- was this done accidentally or intentionally?

does that matter?

Yes; malice is indefensible no matter the circumstances, mistakes may be defensible under certain circumstances or with certain responses by the mistakee.

Re: A Brazilian CA trusted only by Microsoft has issued a certificate for google.com

#10

Post by beeflet »

jsheard wrote: post #7
danpalmer wrote: post #2

This is a bad look. I expected the result would be Chrome and Firefox dropping trust for this CA, but they already don't trust this CA. Arguably, Microsoft/Windows trusting a CA that the other big players choose not to trust is an even worse look for Microsoft.

What is even the point of a web CA that isn't trusted by all of the major players? Is there one?

I suppose it allows you to enable third party control and censorship. If you look at microsoft's censorship of bing in china for example, they are more than willing to bend the knee if it means they can get ahead.
Post reply on HN