Hacker News new | ask | show | jobs
by zinekeller 480 days ago
> Doesn't this effectively render corporate CAs useless?

All of the browsers ignore transparency for enterprise roots. To determine which is which, the list of actual public roots is stored separately in the CA database, listed in chrome://certificate-manager/crscerts for Chrome and listed as a "Builtin Object Token" in Firefox's Certificate Manager.