Timeline for How can I verify that a root certificate is authentic?
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 15, 2017 at 11:56 | vote | accept | Kelly Thomas | ||
| Nov 11, 2015 at 20:04 | comment | added | dave_thompson_085 | Note you need to check you have the authentic root AND the CA is sufficiently assuring the certs it issues under that root are authorized and accurate. The browser and OS vendors do this by requiring an audit of the CA, but if you don't trust Microsoft why should you trust Ernst&Young? Plan on spending several months at each CA examining their systems, policies, and people; you'll probably need to put up sizable bonds to protect their proprietary and confidential information. | |
| Nov 11, 2015 at 15:33 | history | answered | Jeff Stice-Hall | CC BY-SA 3.0 |