Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Why worry about E2E encryption, in theory just need a cert issued from a vast array of CAs or intermediates.

Certificate Transparency thankfully means this is a tool a government could only use once if at all, and then they've burned an entire CA.



Isn't certificate transparency opt-in, so any trusted CA could be a potential attack route.


Browsers now require it to consider a certificate valid. Firefox, Chrome, and Safari all require a certificate to include proof of being logged in CT logs.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: