4 ms·
I think Microsoft’s Trusted Root Program [1] is still important even with Edge moving to be a Chrome derivative, and it being missing in the announcement is int
by nixgeek 4y ago
I think Microsoft’s Trusted Root Program [1] is still important even with Edge moving to be a Chrome derivative, and it being missing in the announcement is interesting given three other major programs have approved for inclusion.
Inclusion into the trust stores for Linux distributions like Red Hat and Ubuntu will be another interesting one to watch with Certainly.
Oh and the Oracle Java Root Certificate Program [2], since the JRE has its own root certificate store, and Java is still used very broadly.
[1] https://learn.microsoft.com/en-us/security/trusted-root/program-requirements https://learn.microsoft.com/en-us/security/trusted-root/prog...
[2] https://www.oracle.com/java/technologies/javase/carootcertsprogram.html https://www.oracle.com/java/technologies/javase/carootcertsp...
- jesboat 4y agoVery few people actually manage root programs: Mozilla, Apple, Microsoft, Google, Oracle, and maybe one or two others in smaller niches. Everybody else either uses the platform's store or ships an approximation (the certificate list and some basic constraints, but missing the more complex policies implemented in mozilla::pkix) to Mozilla 's store. That includes Debian, so probably also Ubuntu. Dunno about Red Hat but it's probably the same.
- dadrian 4y agoMicrosoft runs a "legal" root program, rather than a "public" root program, meaning if you're included in the Microsoft root store, you sign a legal contract with Microsoft. This is not the case with Google, Mozilla, or Apple. So the process of being included just looks a little different.