News for hackers. Stuff that matters.
Re:How to distrust a CA without any certificate errors by mwcampbell on Friday March 07, 2025 @07:43AM (#43289708)
> (As an erstwhile pentester, btw, fuck the OS certificate store; makes testing sites a colossal pain)

Can you please explain? I'm just curious, not arguing.

Re:How to distrust a CA without any certificate errors by tptacek on Friday March 07, 2025 @12:02PM (#43291859)
It's a good question! When you're testing websites, you've generally got a browser set up with a fake root cert so you can bypass TLS. In that situation, you want one of your browsers to have a different configuration than your daily driver.