<![CDATA[The number of Certificate Authorities (CA) – that are can sign valid certificates for *any site* – that our devices trust by default is kinda ridiculous and outrageous.]]>The number of Certificate Authorities (CA) – that are can sign valid certificates for *any site* – that our devices trust by default is kinda ridiculous and outrageous.

It's dozens of entities you've never heard of. Not to pick on anyone in particular, as they might be doing a fine / better job than eMudhra, but do you need to trust the GUANG DONG CERTIFICATE AUTHORITY CO LTD. or XRamp Security Services inc.?

Well you can disable whatever CA your phone trusts.

]]>https://forum.fedi.dk/topic/68aa04d2-895d-4aeb-bfdf-7b2777ba4aa8/the-number-of-certificate-authorities-ca-that-are-can-sign-valid-certificates-for-any-site-that-our-devices-trust-by-default-is-kinda-ridiculous-and-outrageous.RSS for NodeThu, 29 Oct 2026 04:36:25 GMTThu, 22 Oct 2026 12:58:28 GMT60<![CDATA[Reply to The number of Certificate Authorities (CA) – that are can sign valid certificates for *any site* – that our devices trust by default is kinda ridiculous and outrageous. on Thu, 22 Oct 2026 13:02:41 GMT]]>And therefore unavailable.

But you can experiment and reenable as you see fit.

]]>https://forum.fedi.dk/post/https://mstdn.fr/users/axx/statuses/117484693819090139https://forum.fedi.dk/post/https://mstdn.fr/users/axx/statuses/117484693819090139Thu, 22 Oct 2026 13:02:41 GMT<![CDATA[Reply to The number of Certificate Authorities (CA) – that are can sign valid certificates for *any site* – that our devices trust by default is kinda ridiculous and outrageous. on Thu, 22 Oct 2026 13:01:36 GMT]]>In Android settings, search for "trusted credentials" or "cert" to find the right section. On mine it's in a subsubmenu in Settings > Security and privacy > more security and privacy > encryption and credentials > trusted credentials

From there, you can disable anything you want.

A word of caution though, if you disable things like Amazon, Google, Microsoft, Comodo, Internet Security Research Group (ISRG, ie: Let's Encrypt), and other big names, expect a lot of sites to no longer be trusted.

]]>https://forum.fedi.dk/post/https://mstdn.fr/users/axx/statuses/117484689600853529https://forum.fedi.dk/post/https://mstdn.fr/users/axx/statuses/117484689600853529Thu, 22 Oct 2026 13:01:36 GMT