Hacker News new | past | comments | ask | show | jobs | submit login

Have CAs always been this sloppy or are we just hearing about it more nowadays?



As the system grows I think there are more and more players, competing for market share, trying to get low prices and high profits, and more shit happens as a result. On top of that, since it's getting more and more important, we also hear about it more.


Browsers have been adding checks (like pinning) that catch some of the faulty certs, whereas before this was much harder to detect.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: