Re: RFC: root cert tool

[Alexandre Julliard]

"Juan Lang"  writes:
> > Do we really need them in the registry at all?  It would seem a lot
> > safer to load them directly from some system dir.
>
> The trouble is not knowing which is the correct system dir / file.  It
> changes from distro to distro, from version to version.  Guessing
> seems less safe (to me) than getting them from some known-good source,
> or from allowing the user to specify the correct source.

As long as you don't try paths under /home, even a moderate amount of
guessing seems safer than storing them in a user-writable file. How
many different paths are there really?