• 2 Posts
  • 68 Comments
Joined 1 year ago
cake
Cake day: June 13th, 2023

help-circle

  • treadful@lemmy.ziptoTechnology@lemmy.worldLet's Encrypt is 10 years old today !
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    edit-2
    2 days ago

    Correct me if I’m wrong, but isn’t the CA only signing your public key to prove identity/authority? I don’t think the CA can magically MITM every cert they sign.

    The impact is not serious enough to warrant a $1m entry fee, IMO. At best, someone could impersonate a site. They’d also have to get other things in line (e.g. DNS hijacking) to be at all successful anyway. And it’s not like most people are authenticating certs themselves. They just trust browsers to trust CAs that vouch for you and prevents those scary browser warnings.

    It doesn’t improve encryption compared to a self-signed cert though.










  • That’s fair, but hardly so aggressive that I’d call it a “crypto crackdown.”

    But it’s hardly unexpected to see lawsuits around unsettled law. Everyone should expect more as we start settling case law and bringing crypto inline with existing law.

    Also, wasn’t it mostly centered around their non-exchange activities? Press release specifically mentions their “Staking-as-a-Service” offering. Not that I see anything wrong with it, but I could see how that could be considered a security. Doesn’t really pass the Howey test.