Re: [TLS] TLS, PKI, and web security. Was: Eleven out of every ten SSL certs aren't valid

[Bruno Harbulot <[e-mail]>]

On 13/07/10 17:40, Robert Relyea wrote:
> The real problem, of course, is those sites that don't have valid certs.
> Continuing to ratched down the ability to get to those sites is good for
> the internet as a whole. Sites with invalid certs are just as dangerous
> for the internet as MITM sites.

Then we're back on the possible subjective manner by which CA 
certificates get into browsers by default. There are consequences in 
terms of oligopoly, which might not be so good for the internet as a whole.


Best wishes,

Bruno.