Comment on What is behind the current Lemmy meme about 4 being a private key?
shalafi@lemmy.world 3 days agoInteresting question! Google spit this out and it makes sense:
The primary reason these specific keys/issuers were created was to solve data sovereignty and data residency requirements for customers in those regions.
Many European and US corporate clients operate under strict legal frameworks (like GDPR in Europe or various federal compliance standards in the US) that legally dictate where cryptographic infrastructure can live, where data can be decrypted, and who can possess the root or intermediate private keys.
Generating separate regional keys is a compliance mechanism to guarantee that a customer’s data or handshake traffic stays within their jurisdiction.
lamp@lemmy.world 2 days ago
Google is wrong. There is no security benefit to using an SSL certificate signer in your jurisdiction because a hacked or malicious certificate authority in another jurisdiction can man-in-the-middle you or your customers just as effectively.
Certificate authorities do not decrypt data or even transfer it on behalf of customers.
shalafi@lemmy.world 1 day ago
It’s about compliance, not security.