News for hackers. Stuff that matters.

A comment on Linux Certificate Authority root stores have a too simple view of 'trust'. Parent comment

Re:Linux Certificate Authority root stores have a too simple... by rlpb on Tuesday December 06, 2022 @08:13AM (#33879113)
The bug report quite clearly states that Ubuntu followed the same revert that Debian did: "The Debian ca-certificates package removed this CA for both TLS (expected) and other uses (like timestamping) (unexpected). Trust was added back in a subsequent update."

So no, Ubuntu didn't do anything wrong or unreasonable here.

Edit:

Here's the Debian revert that Ubuntu followed:

ca-certificates (20200601~deb10u2) buster; urgency=medium ... Revert Symantec CA blacklist (#911289). Closes: #962596, #968002.

From https://tracker.debian.org/media/packages/c/ca-certificates/...

[ Parent | on HN ]

There are no comments on this comment yet.