Yes, Chrome generally uses the OS trust store as "trust roots", however Chrome layers on additional validation and pinning in the Chrome code: CRLSets: https:/

Yes, Chrome generally uses the OS trust store as "trust roots", however Chrome layers on additional validation and pinning in the Chrome code: CRLSets: https://dev.chromium.org/Home/chromium-security/crlsets https://dev.chromium.org/Home/chromium-security/crlsets HSTS Preloading: https://hstspreload.appspot.com/ https://hstspreload.appspot.com/ more: https://www.chromium.org/Home/chromium-security/security-faq#TOC-How-does-key-pinning-interact-with-local-proxies-and-filters- https://www.chromium.org/Home/chromium-security/security-faq...