Comment by themartorana
11 years ago
Who's auditing the auditors? Remember Moody's? It's not entirely analogous, but it's not far from it.
At some point down the chain, you have to rely on trust to some degree. Either disappear in to the wilderness and completely disconnect from the grid or - at some point - you have to trust someone.
All CAs for most browsers are all audited by a third party. That's what provides the trust.
https://cabforum.org/baseline-requirements/ https://www.mozilla.org/en-US/about/governance/policies/secu... https://www.mozilla.org/en-US/about/governance/policies/secu...
Geez the people without a clue wanting to patronize on HN - I'm telling you - nothing like that to lose faith in humanity.