Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror

Comment Certificate Authorities Should Be Consulted First (Score 1) 296

All As far as I'm concerned, I do not think that Google Inc. should be polled in regards to malicious content held via Web sites. Google Inc., as has been written, stores a large amount of personal information as it is however allowing the Corporation to decide as to whether or not a Web site is malicious is controversial in my opinion. Google Inc. is not a Certificate Authority. The Corporation does not issue Personal Certificates nor indeed does it issue Server Certificates to verify the validity of a Web site; the aforementioned role is performed by Thawte Inc. and VeriSign Corp. amongst other Certificate Authorities. Opera ASA's Opera Web Browser boasts a dedicated AntiPhishing implementation via GeoTrust Corp. It is GeoTrust Corp who should validate the authenticity of a Server Certificate because of the fact that it is a Certificate Authority, it is it's role. Google Inc. should not be either liaising with Certificate Authorities or performing its own validity implementation; Certificate Authorities are independent organizations, and because of the fact that Thawte Inc., VeriSign Corp. and GeoTrust Corp. are independent Corporations, it ensures that there is minimal risk in a Server Certificate being issued incorrectly or incorrectly interpreted as malicious in itself.

Slashdot Top Deals

"Be there. Aloha." -- Steve McGarret, _Hawaii Five-Oh_

Working...