Re: Compile without CA

[Emmanuel Revah]

Le Jeu 21 octobre 2010 22:57, Gary a écrit :
> On Thu, Oct 21, 2010 at 1:31 PM, Emmanuel Revah wrote:
>
>> I was wondering if there was a flag (or something) to compile Icecat to:
>>
>>  - Not contain any root certificates by default
>>  - (less important for now) Not halt on ssl "errors"
>
> Wouldn't that break SSL browsing altogether?


Not really, right now having to either:
 - manually adding certificates one by one (after removing all the roots)
 - trusting people i don't trust (and still add "exceptions" for sites i
do trust)
is more ssl browser breaking then anything..


> If you're merely trying
> to debug an SSL connection you might try something like Charles?
> http://www.charlesproxy.com/overview.


Thanks for the link, but I am not trying to debug right now, cheers : ]


> Alternately, you could just go
> in and remove all your root CA certs rather than spend the time trying
> to yank that code out.
>
> -Gary
>


It would be easier to add a compile option then to remove certs one by one
on every browser I use, in my humble IMHO :].  Anyway I am curious and
would like to know how to do this if it is possible.



manu

----
http://manurevah.com