The number of Certificate Authorities (CA) – which can sign valid certificates for *any site* – that our devices trust by default is kinda ridiculous and outrageous.

It's dozens of entities you've never heard of. Not to pick on anyone in particular, as they might be doing a fine / better job than eMudhra, but do you need to trust the GUANG DONG CERTIFICATE AUTHORITY CO LTD. or XRamp Security Services inc.?

Well you can disable whatever CA your phone trusts.

#infosec #cybersecurity