You're viewing the y.diskcat.com public feed.

Cassandrichdalias@hachyderm.io
Oct 21, 2026, 5:18 AM
Everyone else: happy their browser automatically distrusted the bad CAs.
Me: digging into what else Firefox can change through the phone-home backdoor it used to figure out it should distrust the bad CAs and how tf you're supposed to block that.
💬 1🔄 5⭐ 14

Replies

Tristris@chaos.social
Oct 21, 2026, 7:14 AM
@dalias Have fun with CRLite xD
💬 0🔄 0⭐ 0
Haelwenn /элвэн/ :triskell:lanodan@queer.hacktivis.me
Oct 21, 2026, 8:03 AM
@dalias Yeah, was rather happy to see webkit-gtk (glib-networking → gnutls/openssl) not pulling this thing on me.
💬 0🔄 0⭐ 0
FoxoBread :therian:fox@bark.lgbt
Oct 21, 2026, 10:29 AM
@lanodan @dalias
I ended up using badwolf to figure out if I'd managed to distrust the CA in the system store :3
💬 0🔄 0⭐ 0