3 ms·

I think in the past when governments tried this route the response was browsers explicitly distrusting the certificate. I'll be getting my popcorn out to see if

I think in the past when governments tried this route the response was browsers explicitly distrusting the certificate. I'll be getting my popcorn out to see if they have a spine because last time it was just Kazakhstan. See also: https://blog.mozilla.org/en/mozilla/mozilla-takes-action-to-protect-users-in-kazakhstan/ https://blog.mozilla.org/en/mozilla/mozilla-takes-action-to-...

walrus01 5y ago
mozilla is generally good about these things, but what about browsers that use the operating system root CA trust storage? Mozilla is the only browser vendor that maintains their own root CA list independently. If you can get the operator of a windows 10/11 or MacOS device, or ios or android client device to insert a root CA into the OS trust store, then edge, chrome, and safari will trust it.
- stefan_ 5y ago
  Chrome starts with the operating system CA store, but they have a large builtin list of revoked or otherwise blocked certificates: https://www.chromium.org/Home/chromium-security/crlsets/ https://www.chromium.org/Home/chromium-security/crlsets/