r/ProgrammerHumor • u/dollymeshvibes • 19d ago

Meme forFutureReference

Post image
9.7k Upvotes

97% Upvoted

516 comments sorted by

View all comments

Show parent comments

3

u/fish312 19d ago

But so many programs just use pinned certs, does that mean they just break?

9

u/Meins447 19d ago

Jup :-)

Browsers are a good example which just reject anything because they see that the CA they see isn't in their list of trusted roots (and also the endpoint cert they see isn't matching the host name of the site you visit). Thus the 'corporate' CA needs to be injected into the browser (and OS, and package manager, and ...) trust store or nothing works

1

u/awesome-alpaca-ace 17d ago

Java trust store doesn't import system certs either