Hacker News Reader

Opera do. Cisco have their own. Oracle do (for Java, primarily) but tend not to participate in CA/B Forum much. Brave did previously have something of a root program - not sure if they still do or if they track Moz and/or Chromium. Quihoo 360 (China) have a root program, too. There are certainly other 'smaller' ones.

View on HN

Interesting, although I do still suspect that the trend is to just piggy back onto one of the large well-respected ones.

For example, I do believe that Opera used to have their own (while they were still doing well), but they seem to be using Chrome these days [1]:

> Opera considers certificates presented trustworthy only when they either have a certificate chain that can be validated up to a Root CA certificate included in the Chrome Root Store or a certificate explicitly configured to be trusted by the user.

[1] https://security.opera.com/en/webpki-trust-anchors/

Reply on news.ycombinator.com