4 ms·
> And every single government force you to download their own cert Is that true though? I’ve immigrated quite a bunch (western world only) and never had to dow
by barbazoo 3y ago
> And every single government force you to download their own cert
Is that true though? I’ve immigrated quite a bunch (western world only) and never had to download a certificate when interacting with the government.
- Maken 3y agoThey used yo. Now most governments just have their own "proper" CAs which are included by default in web browsers. If you look at the default CA list of Firefox or Chrome you will see most of them are public agencies.
- theonlybutlet 3y agoI think Certificate transparency checks mean you should be able to tell if the certificate was fraudulently issued for a domain that is not with the CA. (This circumvents that.) In your scenario, if the domains CA is the government CA anyway, then it's fair game. Most domains' CA will be cloudflare or whatever not the government CA.
- asdffdasasdf 3y agohere's one example, the brazil irs https://www.receita.gov.br/ https://www.receita.gov.br/ good lucky finding the cert if you didn't download your firefox in brazilian portuguese or didn't register you apple device in brazil. I mean, it is not difficult to find the cert, but it is a pain for travelers.
- grotorea 3y agoThe problem seems to be "wrong domain", not "CA not recognized". You sure you have the right URL?
- asdffdasasdf 3y agoi'm mobile. probably got the wrong url. only have bookmarks for the ca certs https://www.gov.br/iti/pt-br/assuntos/repositorio/repositorio-ac-raiz https://www.gov.br/iti/pt-br/assuntos/repositorio/repositori...
- ric2b 3y agoBut what do you need these certs for, is there a national website that gets an "insecure" warning if you visit it with a foreign version of Firefox?
- asdffdasasdf 3y agoyeah, the tax preparation website and others.