ELI5: what's a 'compromised certificate authority' and why does it matter?

Quiet Rider · 9 likes

think of it like a notary whose stamp got stolen. every document with that stamp is now suspicious

Lena Müller · 0 likes

this is the best analogy ive seen

Sofía Hernández · 2 likes

your browser trusts a list of companies to vouch for websites. if one gets hacked, attackers can make a fake 'this is really your bank' card that your browser believes