Mozilla and CNNIC

Posted Feb 4, 2010 12:35 UTC (Thu) by Oddscurity (guest, #46851)
In reply to: Mozilla and CNNIC by tzafrir
Parent article: Mozilla and CNNIC

So if I understand what you're saying:

- Ship CA certs with the browser, disabled by default
- Upon first encountering a certificate signed with one of these, prompt the
user asking them if they trust the CA in question and allow them to enable
it.

Maybe put this under a switch in about:config?

I'd use it.