4 ms·
How do you know that Firefox and Chrome have not been altered?
by danielweber 12y ago
How do you know that Firefox and Chrome have not been altered?
- ikawe 12y agoThe app code signing process provides some assurance that the app has not been altered. https://developer.apple.com/library/mac/documentation/Security/Conceptual/CodeSigningGuide/Introduction/Introduction.html https://developer.apple.com/library/mac/documentation/Securi... edit: but only in so much as you trust Apple, as they provide and verify the keys. But... assuming you're using an iphone, this isn't really a new threat vector.
- ryan-c 12y agoAny software installed on the system can add root CAs to both of them.
- rictic 12y agoThis may no longer be true for Chrome at least. They recently added protection against unauthorized configuration changes by third party programs. I'm having trouble determining whether that protection extends to root CAs though.
- ryan-c 12y agoChrome, last I checked, mostly relies on the OS list of trusted CAs in OS X and Windows, and brings its own on Linux which uses NSS.