Hacker News new | ask | show | jobs
by tptacek 5913 days ago
You mean, except for every time you've ever visited an SSL-protected website?
1 comments

Have you not been keeping up on the whole SSL web of trust breaking down recently?
Hold on. Let me go check the Hacker News archives at SearchYC to see what the last story was that could have convinced you that the SSL "web of trust" (note: SSL doesn't have a "web of trust") has broken down. Gimme a sec...

... ok, back. So, what you're saying is:

* Mozilla shipping a stale RSA-owned certificate shows that SSL has "broken down", and/or

* Kurt Seifreid allegedly managing to get RapidSSL to issue a cert for "a webmail provider" by signing up for the account "ssladmin" shows that SSL has "broken down".

Gotcha. Have you considered asking the banks, retail brokerages, and trading exchanges to stop relying on SSL, because it's so clearly broken?

I'm sorry for the sarcastic response, but this faux controversy gets tiring.

this faux controversy gets tiring

Just be glad you're not in vaccination business. ;-)