[147022] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: [Cryptography] Opening Discussion: Speculation on "BULLRUN"

daemon@ATHENA.MIT.EDU (Chris Palmer)
Wed Sep 11 13:16:07 2013

X-Original-To: cryptography@metzdowd.com
In-Reply-To: <105671C0-9159-468C-98F4-1645406121DD@hopcount.ca>
Date: Tue, 10 Sep 2013 20:14:03 -0700
From: Chris Palmer <snackypants@gmail.com>
To: Joe Abley <jabley@hopcount.ca>
Cc: "Salz, Rich" <rsalz@akamai.com>,
	"cryptography@metzdowd.com" <cryptography@metzdowd.com>
Errors-To: cryptography-bounces+crypto.discuss=bloom-picayune.mit.edu@metzdowd.com

On Tue, Sep 10, 2013 at 2:04 PM, Joe Abley <jabley@hopcount.ca> wrote:

> As an aside, I see CAs with Chinese organisation names in my browser list.

I wouldn't pick on/fear/call out the Chinese specifically.

Also, be aware that browsers must transitively trust all the issuers
that the known trust anchors have issued issuing certificates for.
That's a much bigger set, and is not currently fully knowable.
(Another reason to crave Certificate Transparency.)
_______________________________________________
The cryptography mailing list
cryptography@metzdowd.com
http://www.metzdowd.com/mailman/listinfo/cryptography

home help back first fref pref prev next nref lref last post