News for hackers. Stuff that matters.

A comment on Trusted End Node Security.

Re:Trusted End Node Security by Detry322 on Tuesday April 10, 2018 @01:39AM (#16799244)
This doesn't work for me - I need to have the Department of Defense root certificate installed, but I'm not sure I'm willing to do that...
[ Parent | on HN ]
Re:Trusted End Node Security by acqq on Tuesday April 10, 2018 @01:50AM (#16799295)
No you don't. At least not even on old IE 11, and I can't imagine any other browser doing it worse (and I know Firefox). The browser is supposed to allow you to access the site my just confirming that you want. No root certificates.
[ Parent | on HN ]
Re:Trusted End Node Security by 4ad on Tuesday April 10, 2018 @11:51AM (#16802269)
On Safari the only option to proceed requires installing the DoD certificate.
[ Parent | on HN ]
Re:Trusted End Node Security by acqq on Tuesday April 10, 2018 @06:22PM (#16806107)
I used mobile Safari both on iOS 11 and iOS 10 with no problem on that site. Also on mac OS, at least according to this picture, it's not the CA that's accepted, just the exact site certificate and only for the given site:

https://i.stack.imgur.com/vqOBP.png

[ Parent | on HN ]
Re:Trusted End Node Security by Detry322 on Wednesday April 11, 2018 @09:40AM (#16810926)
What I see:

https://i.imgur.com/spJHOdE.png

[ Parent | on HN ]