3 ms·
If you're running Windows, it's built into the OS using Group Policy. Very helpful when a company is running it's own internal CA/PKI.
by mjcl 9y ago
If you're running Windows, it's built into the OS using Group Policy. Very helpful when a company is running it's own internal CA/PKI.
- m-j-fox 9y agoWow Windows. You've outdone yourself. Can I assume Linux and Mac are safe?
- mi100hael 9y agoNope, you can install additional certificate authorities in the system keychain on Mac, which Safari and Chrome both use. Commonly done on managed installs. https://www.jamf.com/jamf-nation/discussions/11830/deploying-certificates https://www.jamf.com/jamf-nation/discussions/11830/deploying... Other applications on mac/linux that use their own keystore like OpenSSL or Java will throw cert errors if you don't also install the CA in their keystores, but that could be scripted as well if it causes too much friction for users. If you're in such an environment, the options are either install the CA or don't use anything that requires HTTPS ¯\_(ツ)_/¯