Re:Certificate Authorities and the Fragility of Internet Safety
by nickf on Thursday December 05, 2024 @03:20AM
(#42326104)
Opera do. Cisco have their own. Oracle do (for Java, primarily) but tend not to participate in CA/B Forum much.
Brave did previously have something of a root program - not sure if they still do or if they track Moz and/or Chromium.
Quihoo 360 (China) have a root program, too. There are certainly other 'smaller' ones.
[ Parent
| on HN ]
Re:Certificate Authorities and the Fragility of Internet Safety
by lxgr on Thursday December 05, 2024 @10:03AM
(#42328875)
Interesting, although I do still suspect that the trend is to just piggy back onto one of the large well-respected ones.
For example, I do believe that Opera used to have their own (while they were still doing well), but they seem to be using Chrome these days [1]:
> Opera considers certificates presented trustworthy only when they either have a certificate chain that can be validated up to a Root CA certificate included in the Chrome Root Store or a certificate explicitly configured to be trusted by the user.