3 ms·
The parent is not suggesting a deviation from the "it just works" model. They are suggesting a convenient way for expert or "paranoid" users to be able to make
by iliketosleep 9y ago
The parent is not suggesting a deviation from the "it just works" model. They are suggesting a convenient way for expert or "paranoid" users to be able to make changes to whom they trust as they see fit - this does not affect average users at all, but may provide significant benefits to an important minority of users.
- likelynew 9y agoWe can add or remove root certificates for OS, it's just deliberately not easy.
- chaz6 9y agoThis makes me think that the package containing the trusted certificate list ought to be separated into a standalone repository, so that it is easy to change (like how you subscribe to an adblock list).
- bryanrasmussen 9y agothe implication being that if you don't find it easy enough to do it, then you probably aren't expert enough that you should be doing it.
- snakeanus 9y ago> it's just deliberately not easy And thus crippled and useless against state attackers. I fail to see the reason why my browser refuses to let me "pin" a CA only for certain sites for example.