Yes - I thought this was a cryptographic breakthrough, but it's just people brea... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		billybob on March 24, 2010 \| parent \| context \| favorite \| on: Law Enforcement Appliance Subverts SSL Yes - I thought this was a cryptographic breakthrough, but it's just people breaking promises.

orangecat on March 24, 2010 [–]

That, and it demonstrates how bad the default SSL trust model is. If the gmail.com certificate came from Thawte yesterday and comes from the Department of Defense or CNNIC today, your browser will happily accept it without warning.

Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact