TrustCor certificate authority, worth looking into?

Users and developers helping users with generic and technical Pale Moon issues on all operating systems.

Moderator: trava90

Forum rules
This board is for technical/general usage questions and troubleshooting for the Pale Moon browser only.
Technical issues and questions not related to the Pale Moon browser should be posted in other boards!
Please keep off-topic and general discussion out of this board, thank you!
BenFenner
Astronaut
Astronaut
Posts: 588
Joined: 2015-06-01, 12:52
Location: US Southeast

TrustCor certificate authority, worth looking into?

Unread post by BenFenner » 2022-12-05, 20:08

I searched the forum and found no discussion about TrustCor Systems and their certificate authority status in regard to Pale Moon.

I don't know the details, and I doubt many others do as well so here's an article to get us started:
https://tech.slashdot.org/story/22/12/0 ... contractor
(As usual with Slashdot articles, there is likely gold in the comment section.)

I'm not terribly concerned, but it seems something to bring up.
Any insight from those in the know would be appreciated.
Is this a CA Pale Moon currently accepts? Is that something that might change in the future?

Cheers!

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35474
Joined: 2011-08-28, 17:27
Location: Motala, SE
Contact:

Re: TrustCor certificate authority, worth looking into?

Unread post by Moonchild » 2022-12-06, 01:42

BenFenner wrote:
2022-12-05, 20:08
Is this a CA Pale Moon currently accepts?
Yes
Image1.jpg
BenFenner wrote:
2022-12-05, 20:08
Is that something that might change in the future?
It might, when we next update our built-in certificate store.

Not sure why this is made more of a deal than any other changes to the certstore currently done. CAs are added and removed all the time based on the Browser/CA forum decisions and trust negotiations done in that corner of the web.

If you want to explicitly distrust the CA then go into your cert manager, find the certs I screenshot, and edit their trust.
Note that this will impact SSL connectivity for sites that employ certificates signed by TrustCor and that have not been cross-signed by another CA.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

BenFenner
Astronaut
Astronaut
Posts: 588
Joined: 2015-06-01, 12:52
Location: US Southeast

Re: TrustCor certificate authority, worth looking into?

Unread post by BenFenner » 2022-12-07, 01:28

Excellent info, thank you very much!

(I have no dog in this fight, t'was pure curiosity.)

Locked