And the Debian CA is only an intermediate. Their certificate is signed by SPI, whose root is not included in Mozilla products (presumably because it hasn't applied for that).
ca-certificates does include the SPI root in addition to those included in Firefox, but note the disclaimer in the README.Debian file in the ca- certificates source package: "Please note that Debian can neither confirm nor deny whether the certificate authorities whose certificates are included in this package have in any way been audited for trustworthiness or RFC 3647 compliance. Full responsibility to assess them belongs to the local system administrator." -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1042040 Title: debian CA not shipped in firefox To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1042040/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
