CrySP Speaker Series on Privacy • CVE-2022-23491, or Why PO Boxes Can’t be Root Certificate Authorities Anymore
Please note: This talk will take place in DC 3317 and online over Zoom.
Joel Reardon, Associate Professor
Department of Computer Science, University of Calgary
Mozilla curates a set of root certificate authorities to validate hostnames for TLS in the Firefox browser. Many other software projects, such as Tor Browser and ca-certificates simply follow Mozilla’s list; other entities, such as Apple and Microsoft, make their own decisions for inclusion with considerations for Mozilla’s decisions and the associated public discussion.