Comment by phillipseamore

2 days ago

s/Google/Apple, Google, Microsoft, and Mozilla/

Not in any realistic way, no. Because Chrome is by far the majority of the market, so what Google ships is what is available on the web. If Google unilaterally decides it is going to distrust a CA, it doesn't really matter who else does or not, the CA is dead.

Not that the other parties are that independent anyways: Microsoft's browser is a Google fork, and is wholly dependent on it. Mozilla's entire funding is Google. Apple is arguably the only somewhat independent party here, but that multibillion dollar annual search deal... let's say it incentivizes collaboration.

  • Edge may be a fork of Chromium but they have the capability of shipping whatever roots they want or setting whatever trust policies they want

    And the push-down in certificate age is, or at least was at the beginning, a push from Apple. The others have come around/along for the ride