News for hackers. Stuff that matters.
Re:New trusted root certificates added to Windows in unannou... by sbierwagen on Tuesday October 11, 2016 @06:10PM (#12688937)
Trusted Root Certification Authorities and Third-Party Root Certification Authorities only show me a couple dozen roots each, https://snag.gy/pLwe3q.jpg where https://hexatomium.github.io/2016/10/11/unannounced-root-cer... says that Microsoft trusts 356 roots total, a list being here: http://social.technet.microsoft.com/wiki/contents/articles/3...

Most notably for me, the list doesn't show any of the foreign roots, Agencia Notarial de Certificación, Autoridad Certificadora Raíz Nacional de Uruguay, etc. Are they kept anywhere else?

EDIT: According to the author, Manage Computer Certificates will only show you that a trusted root exists after you've used it. Trusted roots that you've never used are invisible: http://hexatomium.github.io/2015/08/29/why-is-windows/

The test he provides still works: "OpenTrust Root CA G3" won't show up in Manage Computer Certificates until you visit https://www.opentrust.com/

So, Manage Computer Certificates is useless for untrusting roots Microsoft trusts for you.

Re:New trusted root certificates added to Windows in unannou... by mey on Tuesday October 11, 2016 @07:03PM (#12689225)
Did not know that, thanks for the additional information.