Re:A list of recent hostile moves by Google's Chrome team
by cubefox on Thursday August 03, 2023 @08:58AM
(#36985266)
The dramatic (RED ALERT DANGER !!!) certificate error messages are completely over the top. Safari is worse than others, but all are bad. The browser vendors are acting as if HTTPS with certificate issues is a hundred times worse than plain unencrypted HTTP, which it is not.
Did I say "all browsers"? Sorry, not quite. iOS Safari outright refuses connecting. And it won't say why. I had to connect the damn iPhone with a cable to an Xcode machine, to open up browser console and see the error there. Turns out Safari is a special snowflake that requires doing some preparation ahead of time (no less than 3 steps!) 1) getting the Root CA into the phone, 2) install it in the cert storage, by the way you won't be able to do it if used a non-Apple app for step 1; and 3) enable full trust in the new CA. All that for a phone that I quickly borrowed from my flatmate. Thanks but no thanks! Not all developments are enterprise projects with proper laboratory devices.