SSL certificates usually come with the OS or the browser. AFAIK there's no easy ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		die_sekte on Jan 24, 2011 \| parent \| context \| favorite \| on: The code injected to steal passwords in Tunisia SSL certificates usually come with the OS or the browser. AFAIK there's no easy way for the ISP to add certificates.

duskwuff on Jan 25, 2011 | [–]

Unless they are a government entity which is recognized as a certificate authority, or which can exert influence over one.

gcb on Jan 25, 2011 | [–]

But there are millions of ways to provide you their version of firefox_installer.exe with the 'right' certificates.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact