General project discussion.
Use this as a last resort if your topic does not fit in any of the other boards but it still on-topic.
Forum rules
This General Discussion board is meant for topics that are still relevant to Pale Moon, web browsers, browser tech, UXP applications, and related, but don't have a more fitting board available.
Please stick to the relevance of this forum here, which focuses on everything around the Pale Moon project and its user community. "Random" subjects don't belong here, and should be posted in the Off-Topic board.
-
Veit Kannegieser
- Moonbather
- Posts: 74
- Joined: 2019-03-23, 19:16
Post
by Veit Kannegieser » 2026-04-18, 13:00
Basilisk-Dev wrote: ↑2026-04-18, 12:03
but me self signing a cert for my own domain is not trustworthy?
add it to the certificate database. works better when having a self signed CA, and then add to OS CA database - loved in enterprise environment
Basilisk-Dev wrote: ↑2026-04-18, 12:03
It seems kind of pointless if Let’s Encrypt will just issue a free certificate to anybody?
You should protect against using DNS CAA record.
Off-topic:
I have a IPv4 certificate for fun/test now, updated each ~3 days, would not help here of course.
-
Moonchild
- Project founder
- Posts: 39260
- Joined: 2011-08-28, 17:27
- Location: Sweden
Post
by Moonchild » 2026-04-18, 14:08
Basilisk-Dev wrote: ↑2026-04-18, 12:03
Semi-related. Who determines that a CA is trustworthy, but me self signing a cert for my own domain is not trustworthy? It seems kind of pointless if Let’s Encrypt will just issue a free certificate to anybody?
Primarily the CA/B forum determines who is trusted. Then the browsers incorporate root certificates based on those decisions. And those holding root certificates delegate trust down to individual CAs by signing CA certificates.
You can, however, trust anyone you want by importing the signing certificates into your certificate store in the browser.
"Praise from a narcissistic person is always a poison dart. They don't share the stage, so discernment matters." - Dr. Ramani
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
