Changes

Here's a fictional story that highlights the risks of having only one CA in the trusted root folder of a PC:

Here's a fictional story that highlights the risks of having only one CA in the trusted root folder of a PC:

:Once upon a time, there was a small company "Toys4Evr" that relied heavily on the internet for their business operations. They had set up their PC's with ''only one'' CA in the trusted root folder, ''believing that it would be enough'' to ensure the security of their online transactions.

:Once upon a time, there was a small company ''Toys4Evr'' that relied heavily on the internet for their business operations. They had set up their PC's with ''only one'' CA in the trusted root folder, ''believing that it would be enough'' to ensure the security of their online transactions.

:One day, a malicious hacker "Alex" managed to compromise Toys4Evr's  single CA that the company was relying on. Using the compromised CA, the hacker was able to issue fraudulent certificates for the company's website and email server.

:One day, a malicious hacker ''Alex'' managed to compromise Toys4Evr's  single certificate authority that the company was relying on. Using the compromised CA, Alex was able to issue fraudulent certificates for the Toys4Evr's website and email server ''to himself'' and masquerade as each of those servers, collect traffic and redirect it (see [[Trusted_Root_Certificate_Authority_(CA)#Summary_of_a_Man-in-the-middle_.28MITM.29_attack|MITM section]] below).

:Unknowingly, the employees of Toys4Evr continued to use their PC's to access the website and email server, believing that they were communicating with the legitimate servers. In reality, they were unknowingly sending sensitive information and credentials to Alex.

:Unknowingly, ''Bob and Alice,'' the employees of Toys4Evr, continued to use their computers to access the website and email server, believing that they were communicating with the legitimate servers. In reality, they were unknowingly sending sensitive information and credentials to Alex.

:Alex then used the stolen information to gain access to Toys4Evr's financial accounts and steal a large sum of money. Toys4Evr was left in financial ruin and had to close down their operations. So sad.

:Alex then used the stolen information to gain access to Toys4Evr's financial accounts and steal a large sum of money. Toys4Evr was left in financial ruin and had to close down their operations. Sad.

The moral of the story is that having only one CA in the trusted root folder of a PC can create a single point of failure that can be exploited by malicious actors, leading to severe consequences. It is important to have multiple CAs in the trusted root folder in order to provide redundancy and failover, and to increase the overall security of the trust infrastructure.

The moral of the story is that having only one CA in the trusted root folder of a PC can create a single point of failure that can be exploited by malicious actors, leading to severe consequences. It is important to have multiple CAs in the trusted root folder in order to provide redundancy and failover, and to increase the overall security of the trust infrastructure.