PKI (public key infrastructure) is much more fragile than people realize. Each browser vendor has its own store of trusted certificates. Java, Node.JS, .NET/Mon

PKI (public key infrastructure) is much more fragile than people realize. Each browser vendor has its own store of trusted certificates. Java, Node.JS, .NET/Mono have their own stores. These are completely separate from the operating system's store for good and bad reasons. Also, certificate revocations are not even handled like you'd expect: https://www.ssls.com/blog/why-ssl-certificate-revocation-checks-dont-always-work-like-they-should/ https://www.ssls.com/blog/why-ssl-certificate-revocation-che...