Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Okay, but that isn't about being a single point of failure. That happens with this policy regardless of whether HTTPS is centralized around LE or not.


Oh for sure. This is stupid policy by an organization with no accountability to anyone, that represents the interests of parties with their own agendas.


I don't think it's that venal: the CABF holds CAs accountable, largely through the incentives of browsers (which in turn are the incentives of users, mediated by what Google, Microsoft, Apple, and Mozilla think is worth their time). That last mediation is perhaps not ideal, but it's also not a black hole of accountability.


I don’t think it’s venal, but the browser makers don’t represent the different constituencies that operate servers or end users in many capacities.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: