Many of the root certificates on Windows are not needed

Re:Many of the root certificates on Windows are not needed by yonixw on Monday October 19, 2020 @12:21PM (#24827834)

Distrust Amazon Root CA 1? This is the root CA for a lot of AWS API gateways. Waaaaay Overkill.

[ Parent | on HN ]

Re:Many of the root certificates on Windows are not needed by CrendKing on Monday October 19, 2020 @09:26PM (#24833118)

Those selected in the screenshot are included in the Mozilla list, thus to be trusted. They instruct to distrust the inversion. Here's quote from the instruction:

    2. Right-click the selection and click Invert selection
    3. Right-click the selection and click Distrust

[ Parent | on HN ]

Re:Many of the root certificates on Windows are not needed by iameli on Monday October 19, 2020 @01:19PM (#24828536)

Firefox doesn't trust the root CA for a lot of AWS API gateways?

[ Parent | on HN ]

Re:Many of the root certificates on Windows are not needed by 0xxon on Monday October 19, 2020 @01:41PM (#24828766)

The fact that some root stores/browsers don't trust some CAs is actually quite common. There will be some cross-sign from another CA that is trusted in Firefox in this case.

Stuff like this is quite common; we published a paper on this recently if you are interested in details: https://arxiv.org/abs/2009.08772

[ Parent | on HN ]

Re:Many of the root certificates on Windows are not needed by sleevi on Monday October 19, 2020 @02:26PM (#24829297)

https://medium.com/@sleevi_/path-building-vs-path-verifying-... also has some utilities to visualize this using JS to explore these relationships, and understand the code tradeoffs.

[ Parent | on HN ]