2025-01-25 UTC
# aaronpk let's say your CA was compromised and anyone can issue a cert for any domain with it. your computer would be the only one trusting that CA in the first place, so only your computer would be at risk in the first place. in order to actually do anything bad, your computer's DNS would also have to resolve a domain to the attacker's IP. so if someone also hacked your router to trick your computer into