Post

The whole "only browsers are okay and everything else is hosed" is a pretty friggin bad state of affairs, tbh. We ought to do better as an industry.

Filippo Valsorda@filippo.abyssdomain.expert

After the firefighting is done (and a nap) we'll need to have a long, serious conversation about the state of non-browser non-platform X.509 verifiers. The Linux status quo is "a pile of PEM files behind a dumpster" and that's not an acceptable excuse for a root store in 2026.

1 repost9 likes

No replies yet.