News for hackers. Stuff that matters.
Re:Let's Encrypt Has Issued a Billion Certificates by tialaramex on Thursday February 27, 2020 @03:35PM (#22437493)
Actually Firefox for example carries around code to arbitrarily set any restrictions on any of the root CAs in Mozilla's trust store.

These are documented, on a best effort basis, at:

https://wiki.mozilla.org/CA/Additional_Trust_Changes

It is true, however, that no equivalent rules are enforced in most generic TLS clients (e.g. using OpenSSL directly or something like Python).

There are no comments on this comment yet.