Hacker News Reader

So is the way to go forward that browser-vendors implement bruteforcing of private keys for a couple of seconds whenever the browser encounters a previously unseen certificate?

View on HN

or more likely automated brute forcing of any new certificates before including?

Intermediate certificates are not included.

Reply on news.ycombinator.com