logoalt Hacker News

dist-epoch • today at 10:26 AM • 2 replies • view on HN

> and no TLS certificates chaining to these CAs ever showed up in CT

Why are browsers trusting CAs which issued zero certificates since their creation 1 year ago?


Replies

skywhopper • today at 10:42 AM

These are intermediate roots, signed by trusted root certs, so the trust from your OS or browser is implicit to the roots it trusts.

➕ show 1 reply