Hacker News

points by LtWorf 1 day ago | 0 comments

Certainly you're aware that every certificate sits in a separate file and an update can just remove the interested files?

I would be aware of that if it were true, but (surprise!) it's not

not convinced? take a look at your /etc/ssl/cert.pem

dpkg --listfiles ca-certificates

Well looks like they should take the hint from a better vendor such as Debian then :)

It doesn’t look like that, it looks like it’s a cert.pem file.