Item

mFixman · 2026-10-28T15:35:04.000Z

Question for people who know about this: why do we have hundreds of root certificate authorities, when a vulnerability on a single one can break encryption?

Wouldn't it make more sense to have 5 or so that can be more closely monitored, so something like the eMudhra certificates would probably be found before the certificates are deployed?

trebligdivad · 2026-10-28T15:36:02.000Z

And which countries shall run those 5?

mFixman · 2026-10-28T15:45:17.000Z

The US, which already centralises the internet by running .com and developed most of the software using these certificates?

It's not like they cannot introduce a bad certificate right now. We would be just be taking the ability from all other countries from doing the same.

samatman · 2026-10-28T17:38:12.000Z

The permanent members of the Security Council, obviously.