News for hackers. Stuff that matters.

A comment on Intent to Deprecate and Remove: Trust in Existing Symantec-Issued Certificates. Parent comment

Re:Intent to Deprecate and Remove: Trust in Existing Symante... by zeveb on Thursday March 23, 2017 @01:28PM (#13941910)
> Or they will ignore Google, continue to create bad certs, and users will start getting instructed by sites that they have to manually add a root certificate in order to use they site, and the entire ecosystem will collapse.

IIRC that's Amazon's answer to 'how should a user install Amazon Prime on Android?' I don't know how successful they've been convincing users to allow installation of untrusted apps (I certainly haven't done it), but … probably more than a few have done it.

[ Parent | on HN ]
Re:Intent to Deprecate and Remove: Trust in Existing Symante... by DaiPlusPlus on Thursday March 23, 2017 @01:31PM (#13941953)
Installing apps from other stores on Android is literally a checkbox away - but installing new root certs on computers is considerably harder, or impossible if your computer is locked-down (group policy, etc).
[ Parent | on HN ]
Re:Intent to Deprecate and Remove: Trust in Existing Symante... by wiml on Friday March 24, 2017 @01:24AM (#13946831)
Installing new roots on Macs, iOS, and Android devices is really easy. It's mildly inconvenient on Linux desktops.
[ Parent | on HN ]
Re:Intent to Deprecate and Remove: Trust in Existing Symante... by victorhooi on Saturday March 25, 2017 @07:31AM (#13955095)
It's actually no longer possible on Android, without jumping through significant hoops:

https://android-developers.googleblog.com/2016/07/changes-to... https://news.ycombinator.com/item?id=12061320 https://github.com/mitmproxy/mitmproxy/issues/2054

And it's really not the sort of thing your average non-technical user is likely to do - and trust me, having supported these users before, it's likely to go horribly wrong if you try providing steps for them.

[ Parent | on HN ]
Re:Intent to Deprecate and Remove: Trust in Existing Symante... by tracker1 on Thursday March 23, 2017 @06:51PM (#13945069)
I did it... mainly for amazon's own apps.
[ Parent | on HN ]