4 ms·
Run your own CA and choose your roots carefully didn't make the cut.
by tedunangst 3y ago
Run your own CA and choose your roots carefully didn't make the cut.
- fanf2 3y agoA bit difficult when providing services to third parties who can use any client software :-/
- justsomehnguy 3y agoYes, but if you can serve multiple certificates on one endpoint (think SNI) then you can add your own self-signed or private PKI certificate to be able to check if all your requests are being intercepted by a lazy adversary.
- tedunangst 3y agoThat's actually probably easier than getting a browser to work with a forbidden cert, how dare you.