Why “Certs” is being discussed
The most recent Hacker News stories and comments contributing to this topic's mentions.
But the point of the OP is that git, curl, pip, python, etc don't use certificate transparency. That's why it's so egregious that apple still trusts these certs by default in th…
by faxmeyourcode · Oct 28, 2026
If you're editing /etc/ssl/cert.pem yourself, you're setting yourself up for failure. Use the proper mechanism to add your own trust roots (on macos it's "securit…
by cloudfudge · Oct 28, 2026
but the volume with these certs isn't protected. you can edit the files with vim. i'm curious what the holdup is.
by tonymet · Oct 28, 2026
> Homebrew ships its own CA bundle No trolling by this question: Can you explain your decision? I can see some pros and cons of this decision. Was it simply removing dependency…
by throwaway2037 · Oct 28, 2026
Historically, stuff like openssl and cli command tools used flat files like /etc/ssl/certs.pem. Browsers came along and they wanted to maintain their own cert sto…
by dualvariable · Oct 28, 2026
I might find that a good tool, too, but it’s worth pointing out that even doing that upon any change to the keychain trust settings won’t fix the full problem here. The bad “4”…
by xp84 · Oct 28, 2026
Interest
Proportion of Hacker News items mentioning "certs" over time.
Mentions
Total number of Hacker News items mentioning "certs" over time.
Certs is a brand of breath mint that is noted for the phrase "two mints in one" in its marketing. The original Certs were disc-shaped without a hole and sold in roll packaging similar to Life Savers and Polo. Read more on Wikipedia