The number of Certificate Authorities (CA) – that are can sign valid certificates for *any site* – that our devices trust by default is kinda ridiculous and outrageous.
-
The number of Certificate Authorities (CA) – that are can sign valid certificates for *any site* – that our devices trust by default is kinda ridiculous and outrageous.
It's dozens of entities you've never heard of. Not to pick on anyone in particular, as they might be doing a fine / better job than eMudhra, but do you need to trust the GUANG DONG CERTIFICATE AUTHORITY CO LTD. or XRamp Security Services inc.?
Well you can disable whatever CA your phone trusts.
-
The number of Certificate Authorities (CA) – that are can sign valid certificates for *any site* – that our devices trust by default is kinda ridiculous and outrageous.
It's dozens of entities you've never heard of. Not to pick on anyone in particular, as they might be doing a fine / better job than eMudhra, but do you need to trust the GUANG DONG CERTIFICATE AUTHORITY CO LTD. or XRamp Security Services inc.?
Well you can disable whatever CA your phone trusts.
In Android settings, search for "trusted credentials" or "cert" to find the right section. On mine it's in a subsubmenu in Settings > Security and privacy > more security and privacy > encryption and credentials > trusted credentials
From there, you can disable anything you want.
A word of caution though, if you disable things like Amazon, Google, Microsoft, Comodo, Internet Security Research Group (ISRG, ie: Let's Encrypt), and other big names, expect a lot of sites to no longer be trusted.
-
In Android settings, search for "trusted credentials" or "cert" to find the right section. On mine it's in a subsubmenu in Settings > Security and privacy > more security and privacy > encryption and credentials > trusted credentials
From there, you can disable anything you want.
A word of caution though, if you disable things like Amazon, Google, Microsoft, Comodo, Internet Security Research Group (ISRG, ie: Let's Encrypt), and other big names, expect a lot of sites to no longer be trusted.
And therefore unavailable.
But you can experiment and reenable as you see fit.
-
P pelle@veganism.social shared this topic
