←back to thread

A Brazilian CA trusted only by Microsoft has issued a certificate for google.com

(follow.agwa.name)
482 points sanqui | 2 comments | 30 Nov 24 21:35 UTC | HN request time: 0.517s | source
Show context
danpalmer ◴[01 Dec 24 00:47 UTC] No.42285229[source]▶
This is a bad look. I expected the result would be Chrome and Firefox dropping trust for this CA, but they already don't trust this CA. Arguably, Microsoft/Windows trusting a CA that the other big players choose not to trust is an even worse look for Microsoft.
replies(8): >>42285389 #>>42285408 #>>42285431 #>>42285622 #>>42286061 #>>42286142 #>>42286897 #>>42287654 #
move-on-by ◴[01 Dec 24 01:32 UTC] No.42285431[source]▶
Also being issued on a major US holiday- when many are on PTO- does not help with the look.
replies(1): >>42285701 #
alganet ◴[01 Dec 24 02:37 UTC] No.42285701[source]▶
During carnival we brazillians often take 3 or 4 days leave.

Would it be fair during that time if I asked you to hold your PRs, bug tickets and work in general because we're on paid leave?

On-call rotation exists for those reasons. Otherwise, all countries would need to respect all other countries holidays.

In fact, we're not even aware of most US holidays. It is likely to be a coincidence.

replies(6): >>42286029 #>>42286059 #>>42286108 #>>42286214 #>>42286300 #>>42286357 #
1. lmm ◴[01 Dec 24 03:48 UTC] No.42286029[source]▶
> Would it be fair during that time if I asked you to hold your PRs, bug tickets and work in general because we're on paid leave?

Yes. That's completely normal for companies that do business with Brazil.

replies(1): >>42286187 #
2. alganet ◴[01 Dec 24 04:26 UTC] No.42286187[source]▶
Sorry, my example was bad.

In fact, your example is perfect. We're not talking about business. CAs are different.

In security and infrastructure, there's always someone working on holidays. The larger the organization, higher are the chances that some kind of rotation exists.