Marcel Waldvogel

We have a secretive company with a lot of shady connections and no real office. Ok, there are plenty of them, you say. Yes, but the others don't operate root CAs, the businesses that secure our Internet traffic. 🚩

They also claim to provide end-to-end encrypted mail, but are able to decrypt them. 😱 Reminds me of #Anom…

What could possibly go wrong?

#RootCA #CA #TrustCor
https://www.washingtonpost.com/technology/2022/11/08/trustcor-internet-addresses-government-connections/

Mysterious company with government ties plays key internet role

TrustCor Systems, which vouches for the legitimacy of websites, has connections to contractors for U.S. intelligence agencies and law enforcement, according to security researchers, documents and interviews.

The Washington Post
Nov 8, 2022 at 3:40pmWeb
Show threadAxel EbleNov 8, 2022
@marcel I've long said that the CA/Cert business is b0rken beyond belief when it's controlled by either capitalist companies or governments (depending on which govt.).
Show threadbpNov 8, 2022
@marcel so how do I instruct my devices to stop trusting this CA?
Show threadbpNov 8, 2022
@marcel that was easy, now to see what breaks