search

EndorphinBrowser / browser

Web browser for embedded systems.
GNU General Public License v2.0
16 stars 5 forks source link

Keep certificates from different hosts in separate lists so as to get… #4

Closed datadiode closed 1 year ago

datadiode commented 1 year ago

… less easily fooled by stolen certificates / Combine the two involved message boxes in one which, upon click on Show Details, expands to show full certificate details including the thumbprint, and offers a checkbox to control whether the certificate will be imported to the trust list (which might actually be better described by the term exception list, but I'm undecided on that).

The proposed change is meant to improve both usability and security of certificate error handling, esp in scenarios where self-signed certificates are predominant.

AaronDewes commented 1 year ago

Thank you for this PR! I will test it locally and merge it then. Out of interest, can you tell me what you are using Endorphin for? With your last commit, I assumee you are using it on Windows CE?

datadiode commented 1 year ago

Yes I'm targeting Windows CE. Being involved in some decision making, I hope to rule out Zetakey in favor of Endorphin. Zetakey's demo version is so flawed that it isn't even an attractive benchmark.