Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You can't do this directly in your browser, but you can do it with your system certificate store. Lots of people disable these small, low-volume CAs.

(I wonder if there's a tool out there that does so automatically? Something like Filippo's mkcert but for automatically pruning the CA store down to just the ~dozen major operators?)



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: