4 ms·
Yes they are fetched on demand, but that doesn't mean they have a way to update the root-CA list through Windows updates. For example Windows Updates is used t
by Lennie 11y ago
Yes they are fetched on demand, but that doesn't mean they have a way to update the root-CA list through Windows updates.
For example Windows Updates is used to blacklist CAs certs (like in the case of DigiNotar). The step to adding CAs certs over Windows Updates is really small.