Conversation

Notices

1. Embed this notice
   Peter Tribble (ptribble@mastodon.social)'s status on Monday, 16-Jun-2025 21:39:33 JST Peter Tribble

   It's entertaining when you try and visit a CyberSecurity company website and it's blocked because it uses an invalid security certificate.

   Why is this becoming an issue? Because Mozilla are removing trust bits for really old CAs. So there are a few CAs that are starting to drop out of the list of trusted CAs that Mozilla publish, and that propagates through to distributions as explained on the Mozilla wiki.

   https://wiki.mozilla.org/CA/Root_CA_Lifecycles

   • Haelwenn /элвэн/ :triskell: repeated this.
   • Embed this notice
     Peter Tribble (ptribble@mastodon.social)'s status on Monday, 16-Jun-2025 21:39:33 JST Peter Tribble

     in reply to

     And, if you're interested, the list of root CAs that got dropped this time around is present in this bug report:

     https://bugzilla.mozilla.org/show_bug.cgi?id=1957685