Re:Google adds experimental setting to hide full URLs in Chr...
by extra88 on Sunday June 14, 2020 @07:01AM
(#23516737)
What browser doesn’t warn you about sites signed by a CA not in their list of CAs?
[ Parent
| on HN ]
Re:Google adds experimental setting to hide full URLs in Chr...
by vladvasiliu on Sunday June 14, 2020 @07:11AM
(#23516788)
I specifically said "once it's added to the trust store". It is known to the browser.
When I wrote the message I wasn't in front of Firefox, now I am. So to summarize:
* The CA's certificate is added to the Firefox store and trusted.
* Visiting a site gets the lock in the address bar.
* Clicking on the lock in bar shows "Connection secure. Connection is verified by a certificate issuer that is not recognized by Mozilla"
Screenshot: https://imgur.com/a/T4rznXK
Re:Google adds experimental setting to hide full URLs in Chr...
by extra88 on Sunday June 14, 2020 @11:05AM
(#23518177)
So what’s the problem? Mozilla didn’t add the CA to the trust store, you did, that’s why Mozilla doesn’t recognize it. It doesn’t sound like it interferes with normal operation and differentiating bundled and added CAs on inspection sounds like a good idea.