Skip to main content
10 events
when toggle format what by license comment
Aug 29, 2017 at 18:15 comment added Mike Ounsworth @Kat Agreed. Though one thing I don't like about the CA system is that it puts the burden on the user to know the correct URL for the thing they're looking for. For example, a CA will happily issue a cert for googe.com or bankofamerica.bank even though they do not belong to the organization you expect. My grandmother would definitely fall for this.
Aug 29, 2017 at 18:08 comment added Kat Also, more realistically, the anti-spoofing approach provides an extra layer of protection against phishing. It's not 100% perfect, as people have gotten certificates that they shouldn't have before, but generally certificate authorities are supposed to be a layer of protection so you can be sure that a domain indeed does belong to the organization you expect. And while someone spoofing a site might be difficult and unlikely, everyone is very vulnerable to phishing.
Aug 28, 2017 at 22:48 history edited Mike Ounsworth CC BY-SA 3.0
"authenticity" --> "authentication"
S Aug 27, 2017 at 22:23 history mod moved comments to chat
S Aug 27, 2017 at 22:23 comment added Rory Alsop Comments are not for extended discussion; this conversation has been moved to chat.
Aug 24, 2017 at 12:38 history edited Mike Ounsworth CC BY-SA 3.0
added 37 characters in body
Aug 24, 2017 at 12:27 history edited Mike Ounsworth CC BY-SA 3.0
added 37 characters in body
Aug 24, 2017 at 5:34 vote accept I am the Most Stupid Person
Aug 24, 2017 at 4:38 history edited Mike Ounsworth CC BY-SA 3.0
added 240 characters in body
Aug 24, 2017 at 4:17 history answered Mike Ounsworth CC BY-SA 3.0