Trust Unearned? Evaluating Certificate Authority Trustworthiness Across 5 Billion Certificates

No ratings

Presented at BSides Augusta 2023 by

David Bianco

Security relies on trust, especially when it comes to Certificate Authorities. Browsers ship with many root CAs built in, but are they all equally trustworthy? I examined over 5 billion recent TLS certificates and now I know! In this session I’ll reveal the most and least trustworthy CAs, factors influencing their trust ratings, and how to use this data to protect your organization.