Re: if Google's private keys really WERE stolen...
(I think browsers are better about this than they were ten years ago.)
They may be better, but the CRL and OCSP mechanisms are still fundamentally broken. They help, but they don't help much.
(I think browsers are better about this than they were ten years ago.)
They may be better, but the CRL and OCSP mechanisms are still fundamentally broken. They help, but they don't help much.