Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
billybob
on March 24, 2010
|
parent
|
context
|
favorite
| on:
Law Enforcement Appliance Subverts SSL
Yes - I thought this was a cryptographic breakthrough, but it's just people breaking promises.
orangecat
on March 24, 2010
[–]
That, and it demonstrates how bad the default SSL trust model is. If the gmail.com certificate came from Thawte yesterday and comes from the Department of Defense or CNNIC today, your browser will happily accept it without warning.
Consider applying for YC's Spring batch! Applications are open till Feb 11.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
