We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Etsi tuesta

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Lue lisää

Ketju on arkistoitu. Esitä kysymys, jos tarvitset apua.

In Firefox on Android, how do I untrust the corrupt Blue Coat CA certificate issued by Symantec and the corrupt Chinese certificate CNNIC?

ChernobylGlow
ChernobylGlow
more options

I know how to do this on Windows ( http://bit.ly/2bcz1Qd ), I need the equivalent for how to do this in Firefox on Android.

I know how to do this on Windows ( http://bit.ly/2bcz1Qd ), I need the equivalent for how to do this in Firefox on Android.

Kaikki vastaukset (2)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 10 Contributor
more options

As I understand it, Firefox's Certificate Manager does not have a mechanism or interface to distrust website or intermediary certificates, only built-in root certificates. Unfortunately, then, there is no way to block trust of the BlueCoat certificates in Firefox on any platform.

The previously issued certificate might not be as big an issue as was originally thought:

https://groups.google.com/forum/#!topic/mozilla.dev.security.policy/akOzSAMLf_k

But then Symantec bought Blue Coat, so... http://www.theregister.co.uk/2016/06/14/symantec_blue_coat_analysis/

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 10 Contributor
more options

Re CNNIC, is there a new issue or did this take care of it: https://blog.mozilla.org/security/2015/04/02/distrusting-new-cnnic-certificates/