3 ms·
And why would I trust a company I work at to be able to sign certificates for every single website on the internet? Especially if I need to install that root ce
by wfunction 9y ago
And why would I trust a company I work at to be able to sign certificates for every single website on the internet? Especially if I need to install that root certificate on a personal device?
- icebraining 9y agoWhy would you need to install it in a personal device? Just add an exception. It's still better than plain HTTP since you can check the fingerprint against your work PC, which already validated the cert.
- wfunction 9y agoAdd an exception for every single internal site? You know how annoying that gets?
- revelation 9y agoBecause you already trust chinese, russian and a bunch of unethical for profit companies to do that?
- wfunction 9y agoAs a matter of fact I don't. I'm keeping track of my root certs.
- dspillett 9y agoIf you need such a device to do your job, maybe ask them to provide one so you can keep work off your personal device anyway? I disconnected my phone and so forth from work email and other services some time ago, and I'm not going back!