News for hackers. Stuff that matters.
Re:Microsoft silently adds Amazon root certificates to its CTL by icebraining on Friday January 22, 2016 @09:55AM (#10953001)
Ah, yes, but my suggestion was to pin the root.
Re:Microsoft silently adds Amazon root certificates to its CTL by iancarroll on Friday January 22, 2016 @11:00AM (#10953446)
CAs will not arbitrarily throw out their root certificates (they're quite expensive and valuable), so you'll be fine pinning to a root. I'd advise against it when you use OV or EV certificates though, as it'd allow for a DV certificate to still work.