Hacker News new | past | comments | ask | show | jobs | submit login

For that to be useful, browser vendors would have to start showing something other than a binary "secure" "not secure" setup to the user along with some of that info.

Also, it sounds like something that will be very easy to corrupt.




SSL Labs is a tool mainly used by the website owners/administrators, not so much by end users (and if at all an end user will then complain to the owner about a low rating).

Downgrading the rating because he used a "fishy" CA might motivate the website owner to switch to a CA with better standing. The bad CA will feel pressure to clear their standing.


the best hope is google itself doing it, since most users probably won't look at the secure vs secure-but-not-quite unless it's a scary warning page. Ranking websites lower though and the marketing departments will start calling.


Distribute hashes of certified claims via blockchain.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: