4 ms·
What browser doesn’t warn you about sites signed by a CA not in their list of CAs?
by extra88 6y ago
What browser doesn’t warn you about sites signed by a CA not in their list of CAs?
- vladvasiliu 6y agoI specifically said "once it's added to the trust store". It is known to the browser. When I wrote the message I wasn't in front of Firefox, now I am. So to summarize: * The CA's certificate is added to the Firefox store and trusted. * Visiting a site gets the lock in the address bar. * Clicking on the lock in bar shows "Connection secure. Connection is verified by a certificate issuer that is not recognized by Mozilla" Screenshot: https://imgur.com/a/T4rznXK https://imgur.com/a/T4rznXK
- extra88 6y agoSo what’s the problem? Mozilla didn’t add the CA to the trust store, you did, that’s why Mozilla doesn’t recognize it. It doesn’t sound like it interferes with normal operation and differentiating bundled and added CAs on inspection sounds like a good idea.