On Thu, 25 Apr 2019 18:38:04 +0200 Kurt Roeckx <k...@roeckx.be> wrote:
> So far "normal use", we install the list as provided > by Mozilla as the default. > > > Kurt Lol... im guessing Debian security should have spotted this issue before me. I am sorry but it is not very careful to trust and import any third-party certificate authorities not needed for standard TLS 1.2 security into the Debian package system by default.. Also i dont trust Mozilla corporation (and their third-party partners, including Dark Matter and the UAE i guess) anymore because firefox has become a disgrace for the free software movement i still believe in. :o) Regards, tk -- tkad...@yandex.com | Twitter: @wise_project https://www.isotoperesearch.ca/ Not everyone who wander are lost.