News for hackers. Stuff that matters.

A comment on Brave Improves Its Ad-Blocker Performance with New Engine in Rust. Parent comment

Re:Brave Improves Its Ad-Blocker Performance with New Engine... by intsunny on Thursday June 27, 2019 @04:14AM (#20292585)
I disagree.

OS certificate stores often come with the political baggage of the OS manufacturer. When a Chinese Gov't CA was found to have engaged in fraudulent behavior [0] Google and Firefox were quick to revoke/remove the CA cert from their products. Apple and Microsoft did not do the same, likely because they do not want to upset the Chinese Gov't. (IIRC Iphone users cannot even manually revoke CA's on their own phones.)

[0] https://en.wikipedia.org/wiki/China_Internet_Network_Informa...

[ Parent | on HN ]
Re:Brave Improves Its Ad-Blocker Performance with New Engine... by lenkite on Thursday June 27, 2019 @04:37AM (#20292684)
Then FireFox has made the deliberate choice of excluding millions of users. There are millions of users who use identity management solutions where user-certs and priv-keys are put into the OS store of their devices.

Using the OS secure-store should be a preference option. The folks who don't want to use the "political baggage" of the OS manufacturer - as you put it - can continue to use their pristine gardens.

[ Parent | on HN ]
Re:Brave Improves Its Ad-Blocker Performance with New Engine... by worble on Thursday June 27, 2019 @05:17AM (#20292869)
I've never used this personally, but it is a preference option?

https://serverfault.com/questions/722563/how-to-make-firefox...

Or am I totally misunderstanding this and that's something totally different?

[ Parent | on HN ]
Re:Brave Improves Its Ad-Blocker Performance with New Engine... by lenkite on Thursday June 27, 2019 @11:18AM (#20295167)
I didn't know about this option - thanks. This option basically uses the OS cert store for server certificates, which is one part of the story.

Now, if they also did this for client-certificates then all the folks in companies that use corporate certificate-based single-sign-on can use FireFox!

[ Parent | on HN ]