Re: HTTPS everywhere!
- To: debian-curiosa@lists.debian.org
- Subject: Re: HTTPS everywhere!
- From: Jakub Wilk <jwilk@debian.org>
- Date: Sat, 21 Jun 2014 16:59:04 +0200
- Message-id: <[🔎] 20140621145827.GA774@jwilk.net>
- Mail-followup-to: debian-curiosa@lists.debian.org
- In-reply-to: <87oaxmjpbd.fsf@aexonyam.err.no>
- References: <1402527988.4739.34.camel@heisenberg.scientia.net> <20140612085609.GA3826@jwilk.net> <1402594205.5066.97.camel@heisenberg.scientia.net> <87tx7q9enp.fsf@aexonyam.err.no> <53A032AB.1050802@debian.org> <20140618130058.GA17973@ypig.lip.ens-lyon.fr> <877g4edu77.fsf@windlord.stanford.edu> <1403300549.4386.70.camel@heisenberg.scientia.net> <87oaxmjpbd.fsf@aexonyam.err.no>
* Tollef Fog Heen <tfheen@err.no>, 2014-06-21, 16:43:
And if your concern is that a Debian CA could be used to forge
certificates for non-Debian stuff... given that we have >150 root
certs in the Mozilla bundle... many of them already completely
untrustworthy and many of them probably introducing intermediate CAs
which are even less trustworthy... I wouldn't worry a lot here.
If they are completely untrustworthy, I'd like to see bugs with
documentation for that statement being filed so we can fix it.
We'll use super cow powers to coerce CAs into trustworthiness.
--
Jakub Wilk
Reply to: