Hi, On Fri, May 15, 2026 at 05:52:14PM +0200, Daniel Baumann wrote: > Hi Peter, > > On 5/15/26 15:08, Peter Verbaan wrote: > > The installation process did not ask to enable the newly added mitigations. > > indeed, that would be the correct behavour - thanks you for your report. > > I'll have to see how to implement that for the next upload (probably > tomorrow or on sunday).
I have not looked at the packaging, but just as idea to share: ca-certificates has the mechanism to ask for which certificates should be included/excluded, maybe something going in that direction? Regards, Salvatore

