News for hackers. Stuff that matters.

A comment on Intent to Deprecate and Remove: Trust in Existing Symantec-Issued Certificates. Parent comment

Re:Intent to Deprecate and Remove: Trust in Existing Symante... by dangrossman on Thursday March 23, 2017 @03:12PM (#13943144)
If I'm reading the settings page right, Chrome trusts over 70 certificate issuers right now. Let's Encrypt is just one of those, and only issues a limited set of certificate types.
[ Parent | on HN ]
Re:Intent to Deprecate and Remove: Trust in Existing Symante... by aeijdenberg on Thursday March 23, 2017 @06:20PM (#13944869)
As I understand it, Chrome (unlike Firefox) does not ship its own root CA store - rather it defers to the root store of the operating system that it's running on. It does however apply some form of blacklist / additional restrictions over what the OS may allow.
[ Parent | on HN ]