4 ms·
I run a plain http server on the LAN that hosts a copy of the public part of the CA cert. Download it from there and add it to your trusted CAs.
by codetrotter 2y ago
I run a plain http server on the LAN that hosts a copy of the public part of the CA cert. Download it from there and add it to your trusted CAs.
- chgs 2y agoPlease tell me your friends aren’t stupid enough to install random ca roots
- rezonant 2y agoFriends don't ask friends to install their custom root CA. If someone asked you to install theirs, would you? After all, once they've installed your root CA, you'll now be able to trivially intercept all of their encrypted HTTPS communications while they use your network. I wouldn't trust my mother with that power.
- megous 2y agoI blame lacking implementation of https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10 https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10 by TLS clients.
- chgs 2y agoDoesn’t even have to be the ones baked into the cert - I should be able to import a root to authenticate a list of domains that I specify.