3 ms·
On top of this: sending the entire chain makes it much easier for the client to do silly and insecure things, like naively trusting any root the server presents
by woodruffw 3y ago
On top of this: sending the entire chain makes it much easier for the client to do silly and insecure things, like naively trusting any root the server presents (meaning that the connection would effectively be self-signed, rather than chained to a pre-trusted CA).