Trust on the internet is supposed to be one of the marvels of modern cryptography. A malicious website may try to impersonate your bank or email provider, but web browsers are designed to block the fake. The encryption behind the padlock in the address bar is so strong that even supercomputers running for millennia wouldn’t be able to break it.
That, at least, is the theory. Recent news brought a grim reminder to the global tech community that the system is only as strong as the institutions we trust to police it.
Browsers such as Chrome, Safari and Firefox don’t independently verify every website on Earth. Instead, they outsource that power to a few dozen commercial and government-linked entities known as Certificate Authorities. They are the internet’s notaries. But what happens when the guarantor can’t be trusted?
With your current subscription plan you can comment on stories. However, before writing your first comment, please create a display name in the Profile section of your subscriber account page.