3 ms·
Friends don't ask friends to install their custom root CA. If someone asked you to install theirs, would you? After all, once they've installed your root CA, y
by rezonant 2y ago
Friends don't ask friends to install their custom root CA. If someone asked you to install theirs, would you?
After all, once they've installed your root CA, you'll now be able to trivially intercept all of their encrypted HTTPS communications while they use your network. I wouldn't trust my mother with that power.
- megous 2y agoI blame lacking implementation of https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10 https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10 by TLS clients.
- chgs 2y agoDoesn’t even have to be the ones baked into the cert - I should be able to import a root to authenticate a list of domains that I specify.