Hacker News Reader

>MITM-as-a-Service switches CA.

If you’re worried about MITM, then TLS with unpinned certificates / third party roots of trust is a poor choice.

I'm honestly surprised they didn't roll out their own CA.

They said “today, we’re not a Certificate Authority” — seems to strongly suggest they might be working to become one.

Well they just missed like a best casus belli ever.

Seems an unlikely solution to the present problem to me, unless they can get a cross signed CA as well, they’d need a lot of years to distribute that.

Reply on news.ycombinator.com