Hacker News (curated)new | past | comments | ask | show | jobs| show hidden

Let's pretend there's a night and day difference between pushing some MP3 onto all iPhones and distrusting a chain of certs that hold the value of '4'. At minimum Apple need to revoke everywhere these joke-level certs live and as fast as possible, and on all devices which also means out of support. Breaking is acceptable here as CA trust is fully compromised.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact | github