News for hackers. Stuff that matters.

A comment on How to distrust a CA without any certificate errors. Parent comment

Re:How to distrust a CA without any certificate errors by tptacek on Friday March 07, 2025 @12:02PM (#43291868)
It's baffling to me that anyone would expect browsers to make root store decisions optimized for server-herders. You're not their userbase!
[ Parent | on HN ]
Re:How to distrust a CA without any certificate errors by hello_computer on Saturday March 08, 2025 @01:39AM (#43298040)
neither are pentesters
[ Parent | on HN ]
Re:How to distrust a CA without any certificate errors by tptacek on Saturday March 08, 2025 @12:18PM (#43301732)
Right, I don't think the pentester use case here is at all dispositive; in fact, it's approximately as meaningful as the server-herders.
[ Parent | on HN ]