Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yeah, trust Microsoft, he said:

http://www.theverge.com/2017/1/25/14381174/microsoft-thailan...

Isn't it funny how at the same time someone is recommending to not trust other anti-viruses because they MITM you with their own certificates, Microsoft is doing the same god damn thing, or worse (allowing a whole country to spy on you through it, and not just itself).

> “This program is an extensive review process that includes regular audits from a third-party web trust auditor.

Is that the same auditor that audited WoSign as well?

https://blog.mozilla.org/security/2016/10/24/distrusting-new...

Why hasn't Microsoft started requiring Certificate Transparency yet for all certificates? Maybe then I'll believe them when they say they're sure nothing wrong is going on here.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: