3 ms·

You need the DoD Root CAs. You can get them from here, just follow the instructions: https://public.cyber.mil/pki-pke/end-users/getting-started/ https://public

You need the DoD Root CAs. You can get them from here, just follow the instructions: https://public.cyber.mil/pki-pke/end-users/getting-started/ https://public.cyber.mil/pki-pke/end-users/getting-started/ They're not bad to have in general. The notice you see there is standard boilerplate.

nefitty 6y ago
This seems like it should be included in default root stores. I am out of my element here, but it would be cool if anyone can explain why or if I would need to manually add govt CAs.
- lostapathy 6y ago
  If you allow the US gov CAs to be bundled with your browser, do you allow any country? How would non-US citizens feel about having US CA's in their browser by default?
  - aksss 6y ago
    Seems like most people, US or not, should not trust DoD-signed stuff by default.
  - Kalium 6y ago
    A lot of people have CAs controlled by various countries in their browsers by default. It was big news when CNNIC was dropped from Firefox and Chrome in 2015.