3 ms·
Almost, but now you only have to trust one third party, not 189 (/etc/ssl/certs).
by Qantourisc 10y ago
Almost, but now you only have to trust one third party, not 189 (/etc/ssl/certs).
- rocqua 10y agoThere needn't be a lot of difference, if that single trusted party still signs a lot of other CA certificates. You don't just need to trust the root certificates intsalled, you need to trust all signed CA certificates those root certificates installed (except for public key pinning, which will ignore installed root certificates).