Hacker News new | past | comments | ask | show | jobs | submit login

Even after this disclosures, a fully informed, rational agent would still choose WoSign if their price and service were the best. This is because WoSign's behavior does not specifically endanger their customers.

The SSL ecosystem relies on the trustworthiness of the certificate authorities. If one of them is compromised, the whole system is compromised, not just their customers. This cannot be solved by markets. Instead, it's heavily regulated.




  WoSign's behavior does not specifically endanger
  their customers.
Or more precisely, problems such as issue N [1] endanger their customers, but endanger non-customers just as much.

[1] https://wiki.mozilla.org/CA:WoSign_Issues#Issue_N:_Additiona...




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: