News for hackers. Stuff that matters.

A comment on How I got a valid SSL certificate for my ISP's main domain. Parent comment

Re:How I got a valid SSL certificate for my ISP's main domain by ivanr on Saturday March 21, 2015 @11:39AM (#9243020)
Indeed. Hopefully browser vendors will consider this certificate for explicit blacklisting using their proprietary channels. (I've already asked.)
[ Parent | on HN ]
Re:How I got a valid SSL certificate for my ISP's main domain by agl on Saturday March 21, 2015 @12:42PM (#9243249)
Done in Chrome with CRLSet 2140.
[ Parent | on HN ]
Re:How I got a valid SSL certificate for my ISP's main domain by utefan001 on Saturday March 21, 2015 @12:39PM (#9243239)
Does anyone know if there is a way to blacklist a certificate on a windows 8.1 machine? To me, managing certificates between the os, IE, Chrome and Firefox is a bit of a joke in 2015. Besides blacklisting, I would love to know of script that will output the certificates that the PC has trusted but are not trusted by Verisign.
[ Parent | on HN ]
Re:How I got a valid SSL certificate for my ISP's main domain by realityking on Saturday March 21, 2015 @01:36PM (#9243472)
Both Internet Explorer and Chrome use the system's certificate store. So you "only" have to manage the os and Firefox.
[ Parent | on HN ]