Default Certificates -- Mint or Firefox?

Questions about the project and the distribution - obviously no support questions here please

Default Certificates -- Mint or Firefox?

Postby pgmer6809 on Sun Mar 09, 2014 4:22 pm

I was looking through the list of Certificates in my Firefox and there are a LOT of them.
A bunch from various Telco's that I never deal with such as Taiwan, Turkey, Germany etc. And a lot from various companies many with 'trust' in their names.
Question 1. Where do they all come from? Does Mint install these or are they part of Firefox?
Question 2. Some of the certificates have 'Root' in their names. Does this have any particular meaning?

pgmer6809
pgmer6809
Level 2
Level 2
 
Posts: 96
Joined: Sun Mar 04, 2012 9:06 pm

Linux Mint is funded by ads and donations.
 

Re: Default Certificates -- Mint or Firefox?

Postby pgmer6809 on Sun Mar 09, 2014 5:12 pm

The list of certificates seems to come from Mozilla.
Interestingly this list is also used by Chrome and Chromium.
In Firefox you have the option to 'not trust' these default certs on an individual basis. But in Chrome you have less control.
To see the list of certs, the issuing authorities and the various hashes see here:
Code: Select all
https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/included/
https://docs.google.com/spreadsheet/pub?key=0Ah-tHXMAwqU3dGx0cGFObG9QM192NFM4UWNBMlBaekE&single=true&gid=1&output=html
http://mxr.mozilla.org/mozilla-central/source/security/nss/lib/ckfw/builtins/certdata.txt

pgmer6809
pgmer6809
Level 2
Level 2
 
Posts: 96
Joined: Sun Mar 04, 2012 9:06 pm


Return to Non-technical Questions

Who is online

Users browsing this forum: No registered users and 3 guests