| ▲ | lelanthran 3 days ago | |
> Identity on the Internet is a lie. What do you think HTTPS is? | ||
| ▲ | mdaniel 3 days ago | parent | next [-] | |
Transport Layer Security, and has nothing to do with Identity. Take for example the perfectly valid certificate that was issued for npmjs[.]help which unquestionably does not belong to Microsoft/GitHub. Hell, even the certificate for npmjs.com is 'O=Google Trust Services' which doesn't sound like any of the business entities one would expect to own that cert | ||
| ▲ | rollcat 2 days ago | parent | prev [-] | |
"Whoever was on the cacert list that ships with your browser" has signed "I claim to be Acme Widgets Inc. and I own microsoft.com". | ||