How to permanently delete root CAs from mozilla products?

[Craig White]

On Sat, 2011-09-17 at 17:04 +0200, Christoph A. wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
> 
> On 09/17/2011 01:36 PM, Craig White wrote:
> > I remember having to delete a certificate 2 times to actually physically
> > remove them - the first time sets it to untrusted and the second one
> > finally purges it but I think from a safe point of view, it is probably
> > better to only delete it 1 time to set it to non-trusted and leave it
> > there so there is no ambiguity - it is not to be trusted.
> 
> I wasn't able to reproduce this. I removed them twice and they were
> still there.
----
that may have been the Macintosh that required 2 'deletes' to remove, I
forget.

Again though, probably better to leave them in place and marked
'untrusted' anyway just to ensure that they don't come back again with
the next FF/TB update.

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.