News for hackers. Stuff that matters.
Re:Linux Certificate Authority root stores have a too simple... by cryptonector on Tuesday December 06, 2022 @10:47AM (#33881940)
If you can name a set of trust anchors (e.g., with an environment variable, in a configuration parameter, in a command-line argument, as a function/method parameter), then you've got the power to specify what to trust contextually. The problem is that a) apps usually don't give you such a control, and b) the names of these sets of trust anchors have to be meaningful to users.

(b) is a pretty tough problem!

There are no comments on this comment yet.