Exactly. We could with the flip of a switch ban intermediate CAs; the browser's ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

tptacek on Sept 3, 2011 | parent | context | favorite | on: DigiNotar root CA trust removal follow-up

Exactly.

We could with the flip of a switch ban intermediate CAs; the browser's TLS library sees the chain of intermediate CA=YES certs.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact