[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Compile without CA

From: Emmanuel Revah
Subject: Re: Compile without CA
Date: Thu, 21 Oct 2010 23:45:17 +0200
User-agent: SquirrelMail/1.4.20

Le Jeu 21 octobre 2010 22:57, Gary a écrit :
> On Thu, Oct 21, 2010 at 1:31 PM, Emmanuel Revah wrote:
>> I was wondering if there was a flag (or something) to compile Icecat to:
>>  - Not contain any root certificates by default
>>  - (less important for now) Not halt on ssl "errors"
> Wouldn't that break SSL browsing altogether?

Not really, right now having to either:
 - manually adding certificates one by one (after removing all the roots)
 - trusting people i don't trust (and still add "exceptions" for sites i
do trust)
is more ssl browser breaking then anything..

> If you're merely trying
> to debug an SSL connection you might try something like Charles?
> http://www.charlesproxy.com/overview.

Thanks for the link, but I am not trying to debug right now, cheers : ]

> Alternately, you could just go
> in and remove all your root CA certs rather than spend the time trying
> to yank that code out.
> -Gary

It would be easier to add a compile option then to remove certs one by one
on every browser I use, in my humble IMHO :].  Anyway I am curious and
would like to know how to do this if it is possible.



reply via email to

[Prev in Thread] Current Thread [Next in Thread]