Hacker News Reader

I'm curious why NSA's AppLocker paper has been put behind a DoD membership site when it was previously public. It it part of the same movement that prompted the FBI to remove/hide its public guidelines for using strong encryption?

Ironically, it even gives a certificate error now:

https://www.iad.gov/iad/library/ia-guidance/tech-briefs/appl...

View on HN

You need the DoD Root CA to be trusted for most of these sites to not pop on the alert, and it does not ship with most OSs if any.

What could possibly go wrong with installing DOD's Root CA? Uhmmmmmmm

Very little, since it's primarily for internal DoD use. It was never meant to be a part of the commercial 'web of trust' nonsense, and exists so that DoD doesn't have to trust idiots like Comodo.

Exactly. It's also a logical extension of their COMSEC doctrine which led to things like NSA's EKMS:

https://en.wikipedia.org/wiki/EKMS

Reply on news.ycombinator.com