NetBSD-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Root CAs [was Re: Upgrade 8.2 -> 9.4 breaks cpan?]



> Root C(ertificate)A(uthorities) are a failure and acts of oppression

I don't think they're a failure per se.  They do what they're designed
to do very well.  Trouble is, it's what the designers want(ed), not
what you (or I) want(ed).

CA-hierarchy-secured communication is a fail for me because it is
completely unable to protect against the actors I am most concerned
about, which are large corporations and governments: the ones who are
the roots of the (so-called) trust hierarchy, the kind of entity which
can easily get certs for *.com and the like.

It's putting the foxes in charge of securing the doors on the henhouse.

/~\ The ASCII				  Mouse
\ / Ribbon Campaign
 X  Against HTML		mouse%rodents-montreal.org@localhost
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B


Home | Main Index | Thread Index | Old Index