logoalt Hacker News

matkoniecz • today at 12:34 AM • 2 replies • view on HN

If I understood correctly, emudhra was able to issue certificate to any website.

Therefore if some device trusts emudhra root certificate...


Replies

onedognight • today at 1:05 AM

Google usually does certificate pinning. They know that the CA root store is not to be trusted to sign for their own domains.

onedognight • today at 1:05 AM

[flagged]