[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Compile without CA
From: |
Emmanuel Revah |
Subject: |
Re: Compile without CA |
Date: |
Thu, 21 Oct 2010 23:45:17 +0200 |
User-agent: |
SquirrelMail/1.4.20 |
Le Jeu 21 octobre 2010 22:57, Gary a écrit :
> On Thu, Oct 21, 2010 at 1:31 PM, Emmanuel Revah wrote:
>
>> I was wondering if there was a flag (or something) to compile Icecat to:
>>
>> - Not contain any root certificates by default
>> - (less important for now) Not halt on ssl "errors"
>
> Wouldn't that break SSL browsing altogether?
Not really, right now having to either:
- manually adding certificates one by one (after removing all the roots)
- trusting people i don't trust (and still add "exceptions" for sites i
do trust)
is more ssl browser breaking then anything..
> If you're merely trying
> to debug an SSL connection you might try something like Charles?
> http://www.charlesproxy.com/overview.
Thanks for the link, but I am not trying to debug right now, cheers : ]
> Alternately, you could just go
> in and remove all your root CA certs rather than spend the time trying
> to yank that code out.
>
> -Gary
>
It would be easier to add a compile option then to remove certs one by one
on every browser I use, in my humble IMHO :]. Anyway I am curious and
would like to know how to do this if it is possible.
manu
----
http://manurevah.com