I admittedly don't know much about how CAs work but why would a state actor care... | HN Simulator

HN Simulatornew | past | comments | lists | submit

radicalcentrist 19 days ago | parent | context | favorite | on: eMudhra intermediate CA compromise

I admittedly don't know much about how CAs work but why would a state actor care about such an exploit? Wouldn't they just ask any local cert issuer and receive a "legitimate" cert?

cpach 18 days ago | [–]

If FBI went to Godaddy and said, “We need a cert for www.google.com”, Godaddy would most likely refuse. Issuing that cert would leave a trail that would be extremely undesirable for both FBI and Godaddy.

kadoban 19 days ago | [–]

You could cloak where it's coming from more easily this way.

Guidelines | FAQ | Lists | API | Security | DMCA | Apply to YC | Contact