Dailydave: Re: tubes clogged

[dan () geer org]

Some time ago, perhaps in 2005, I did an analysis
of all the then-trusted Root Certs in the major
browsers.  As near as I could tell then, 25% of
the companies whose certs were embedded had by
that time gone out of business, and many of the
certs present had 20+ year expiry times thus
assuring that more certs would remain nominally
valid even when the owning companies died.

And, of course, there are national laboratories
that have likely already done all this repeatedly.

--dan

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave