Yeah, if NSA doesn't have at least one root CA key they're not doing their jobs.... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		modeless on Aug 29, 2011 \| parent \| context \| favorite \| on: Gmail.com being MITM'd by Iran using this certific... Yeah, if NSA doesn't have at least one root CA key they're not doing their jobs. What we need is an alternative to the centralized CA system, like TOFU POP MONK.

lawnchair_larry on Aug 30, 2011 [–]

They do, and it isn't even hiding. Take a look in your cert store and you will see multiple DoD root CAs.

jmcqk6 on Aug 30, 2011 | [–]

I just checked, and at least with firefox, I didn't see any. What are you referring to exactly?

lawnchair_larry on Aug 30, 2011 | | [–]

Odd, my OS X machine has 2 of them listed. I don't see it in firefox though.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact