Re: Announcing https://github.com/RedHatProductSecurity/Certificates-Shipped/

[Hanno Böck <hanno () hboeck de>]

On Tue, 24 Nov 2015 21:38:35 -0700
Kurt Seifried <kseifried () redhat com> wrote:

> https://github.com/RedHatProductSecurity/Certificates-Shipped/
>
> The idea is to create a comprehensive list of shipped certs/keys/etc
> by open source vendors/distributions/projects so that:

That's good, but in this case why limit to open source vendors?

Actually the MS certs are probably the most interesting for
superfish/edell-like scenarios. And I see no reason why they shouldn't
be transparent.

-- 
Hanno Böck
http://hboeck.de/

mail/jabber: hanno () hboeck de
GPG: BBB51E42

Attachment: _bin
Description: OpenPGP digital signature