mkcert

mkcert copied to clipboard

Pin Mozilla's cert

8

We don't want to expose ourselves to the NSA MITM-ing us. We should pin Mozilla's cert.

Lukasa

Pin the Mozilla cert hash.

2

This adds support for pinning the Mozilla leaf certificate. Some caution needs to be taken here, because this can change underneath our feet. I may need to write some monitoring...

Lukasa

That would be a good idea, eh?

Lukasa

Confused as to how one would download (in my case a router OS) the certificate trust store over the mkcert https API without an existing certificate trust store on the...

ilium007