undefined | Better HN

0 pointspas5y ago0 comments

TLS issuance is decentralized too, yet Certificate Transparency provides accountability, and inclusion into Mozilla's trusted CA list is basically the vetting process that binds CAs to legal entities.

In theory in crypto currency world "staking" is this process.

0 comments

lmm5y ago

TLS is not decentralised, it's hierarchical. There are a fairly small number of root CAs, and an even smaller number of browser makers who define their trusted lists.

pasOP5y ago

Just the Mozilla CA list has more than a hundred CAs ... https://ccadb-public.secure.force.com/mozilla/IncludedCACert...

And you can install your trust root if you want, for example I can't find any Russian ones in that list, so probably the Russian government uses internal ones. (Their tax authority interestingly uses Sectigo a CA from the UK.)

j / k navigate · click thread line to collapse