2 ms·
Kinda nuts actually that you can’t install a Root CA and tell the OS “but only ever use it for these and these domains”. That would solve this elegantly.
by skrebbel 3y ago
Kinda nuts actually that you can’t install a Root CA and tell the OS “but only ever use it for these and these domains”. That would solve this elegantly.
- bruce511 3y agoEven If you could tell the OS it would fail cause much (most?) software has an OS independent path to validate the certificate. OpenSSL for example uses a custom pem file that the program developer supplies.