Suppose I want a secure TLS communication between me and myschool.edu. Which of the following should I trust to preserve confidentiality, integrity, and authenticity. Here are the options and my analysis.
a) The entire network between me and myschool.edu. (I can't, a hacker could have compromised something in between)
b) Computers on my local and home network. (I can't, they could hack my information)
c)The operators of .edu's Authoritative DNS server. (I can trust them, there is only one owner of the .edu brand)
d) The operators of myschool.edu. (I can trust them since I want to communicate with them. Am wondering, what if an individual operator is bad )
e) myschool.edu's CA. (I think I can trust the CA)
f) All the CA's configured into myschool.edu's software. (Since the world has very few CA's, I can trust them).
g) All the CA's configured into my web browser. (I trust CA's)
h) The designers of the cryptographic algorithms. (I can trust them, I assume TLS has good algorithms. I don't know whether its the only encryption that will happen)
Did I analyze these options correctly? I want someone else's point of view on these options.