On Tue, Sep 10, 2013 at 2:04 PM, Joe Abley <jab...@hopcount.ca> wrote:

> As an aside, I see CAs with Chinese organisation names in my browser list.

I wouldn't pick on/fear/call out the Chinese specifically.

Also, be aware that browsers must transitively trust all the issuers
that the known trust anchors have issued issuing certificates for.
That's a much bigger set, and is not currently fully knowable.
(Another reason to crave Certificate Transparency.)
The cryptography mailing list

Reply via email to