Hacker News Reader

Comment by ahoka | Hacker News Reader

Maybe you get a shiny new Turk Trust cert in exchange. Who knows.

I have no idea if 'Turk Trust' is even a real CA or if you made up the name in jest. I'm honestly scared to Google it and find out, in slight fear of finding out that is an actual CA. (Not to get too political here, but given Turkey's current government, I'm not sure how anyone in their right mind would 1- trust them to say or do _anything_, and 2- trust SSL encryption certs coming out of there)

At least it's not Honest Achmed's Used Cars and Certificates ;)

https://bugzilla.mozilla.org/show_bug.cgi?id=647959

Interestingly:

> Eddy Nigg (StartCom)

> Comment 11 • 7 years ago

> According to http://www.mozilla.org/projects/security/certs/policy/ and https://wiki.mozilla.org/CA:Information_checklist apparently fails to comply to the audit requirements amongst other things at the moment. Should a valid audit statement be published and confirmed by an authorized auditor, I guess Mozilla could consider a discussion to include this CA.

LMAO

It's real:

https://bugzilla.mozilla.org/show_bug.cgi?id=1007683

I'm Turkish and I agree. Also, Turk trust got involved in a controversy where they admitted that they leaked a private key. https://www.google.com.tr/amp/s/nakedsecurity.sophos.com/201...

Why Turk Trust?

... basically the top google search result

https://nakedsecurity.sophos.com/2013/01/08/the-turktrust-ss...

Reply on news.ycombinator.com