☭
Well, I untrusted those certificates in Firefox. Not sure if that was needed or if Firefox can query and check that they were revoked (can anyone tell me?), but I did it. On one computer, out of the many that I have...
Ah, great, it appears updating ca-certificates on Gentoo to the latest version also removes the compromised certificate (at least, curl now refuses to connect to their testing site), that makes updating all of my boxes on which I expect security somewhat less tedious
What about an Android evil rectangle that I cannot* update, how do I revoke certificates on there?
And I guess I'll update Fennec web browser to the latest version...
*It would be a lot of effort because of issues with the way I first built LineageOS for it
Went to Security > Additional security settings > Encryption and account data > Trusted certificates and turned off the compromised certificates, but when testing in Fennec (which I updated to the latest version available from F-Droid), it still connects to the compromised sites
And also I had to turn off useless LLM trash in the new version of Fennec (mobile Firefox)
I hate evil rectangles
@vaporeon_ yeah bundled dependencies (including shit like certs) is just normal on android
