Post
Topic
Board Development & Technical Discussion
Re: Invoices/Payments/Receipts proposal discussion
by
Quetzalcoatl_
on 22/10/2013, 00:10:44 UTC
@Gavin Andresen

Several questions:

1. In the post-NSA-snowden era, are you sure it is wise to participate in creation of a centralized mechanism, which governments can easily control ? Why would we trust *any* CA ?


This is not just a hypothetical concern. It is a known fact that not only the NSA, but hacker groups have copies of CA certs, which they use to perform MITM attacks against HTTPS. The CA model is insecure.