3 ms·
> I don't think that's an authoritative source of trust. The proof is literally in the URL when you click on Resources / CSV download which is the following UR
by cookiengineer 5y ago
> I don't think that's an authoritative source of trust.
The proof is literally in the URL when you click on Resources / CSV download which is the following URL [1]
[1] http://ccadb-public.secure.force.com/ccadb/AllCertificateRecordsCSVFormat http://ccadb-public.secure.force.com/ccadb/AllCertificateRec...
- josephcsible 5y agoI know that site has a copy of all the CA certificates. I'm saying it's not the authoritative copy of them. If someone hacked into that and added a rogue CA, your browser wouldn't magically start trusting it.