看板FB_security
标 题Re: RFC: Proposal: Install a /etc/ssl/cert.pem by default?
发信站NCTU CS FreeBSD Server (Fri Jul 4 02:25:23 2014)
转信站ptt!csnews.cs.nctu!news.cednctu!FreeBSD.cs.nctu!.POSTED!freebsd.org!ow
<<On Fri, 4 Jul 2014 00:14:48 +0200, Daniel Roethlisberger <
[email protected]> said:
> [1] There is no such thing as a perfect CA bundle (i.e. both
> secure *and* usable) given how broken the whole CA system is
> these days.
So is anyone working on DANE support in libfetch and other base-system
utilities? Let's lead on this rather than just flaming about how CAs
suck....
-GAWollman
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "
[email protected]"