Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Have you been reading the thread? https://news.ycombinator.com/item?id=46952590 there are a lot of reasons why browsers need to care about whether CAs are issuing insecure certificates to XMPP or SMTP servers (or credit card machines)


> […] there are a lot of reasons why browsers need to care about whether CAs are issuing insecure certificates to XMPP or SMTP servers (or credit card machines)

Why does having the clientAuth capability make a certificate "insecure"?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: