Re: Getting CA certificates into the registry

[Jan Zerebecki]

On Fri, Jul 27, 2007 at 02:12:13AM -0400, Vijay Kiran Kamuju wrote:
> Is it possible to put it on sourceforge like the gecko engine?
> And download it whenever necessary.

The problem with that is that what we want to download here are
certificates. So for them to be of good use one needs to obtain
them in a way so that the trust chain doesn't break too much.

The easiest way to get that is by distributing them with the
normal source (and thus also with the distribution specific
packages). Those are usually signed.

Or to not distribute them and get them from the system at runtime
in some way.

Jan