undefined | Better HN

0 pointsForHackernews1y ago0 comments

>CA trust should be handled at the OS vendor level.

Who's the "vendor" for Linux? IBM?

The outcome of this idea is Google & Microsoft can MITM all internet traffic.

0 comments

> Who's the "vendor" for Linux? IBM?

There are countless companies and groups (but only a handful that serve the vast majority of users) releasing a version of Linux bundled with a GNU userland and other open source niceties, all designed to work together as a system. These are colloquially called "Linux distributions".

agwa1y ago

Linux distros universally use the Mozilla root store. So if a CA told Mozilla "to go pound sand" as suggested by likeabatterycar, the CA would end up distrusted not only by the "2.5%" of browser users, but by every Linux server.

likeabatterycar1y ago

> The outcome of this idea is Google & Microsoft can MITM all internet traffic.

Google, MS, and Apple already handle their own CA trust. So this conspiracy theory would already be true.

ForHackernewsOP1y ago

Wait, is it a "conspiracy theory" or is it true? Are you claiming both? I'm aware that Google, Apple, Microsoft etc. could already MITM traffic to Chrome/Safari/Edge browsers if they were so determined.

j / k navigate · click thread line to collapse