Hacker News Reader

Parent Full thread

toast0

Anyone know how well installed the cross-signed root is? Sounds like it's going to be DST Root CA X3?

https://ssl-tools.net/certificates/cv0tp9-dst-root-ca-x3

View on HN

Windows, OSX, Debian, and NSS (Firefox) all have it in their root trust stores. Dunno about mobile.

EDIT: I can't find it on my Android phone (4.3)...

EDIT2: Found it! Was added in 2010 under the name Digital Signature Trust.

https://android.googlesource.com/platform/libcore/+/master/l...

Apparently it's in iOS 8: https://support.apple.com/en-gb/HT204132

There doesn't seem to be an authoritative list for Android, but I did find this: https://android.googlesource.com/platform/libcore2/+/master/... -- not sure whether it means it's in the latest versions of Android, or whether that means it's going to be all versions of Android (e.g. with manufacturer/carrier modifications, etc) or what...

While the vast majority of users upgrade to iOS 8, certainly not everybody does, so it's good to know that iOS 5 (I didn't check any earlier) also includes the "DST Root CA X3" certificate: https://support.apple.com/en-gb/HT201388

Reply on news.ycombinator.com