Web browser profile with no CA
Originally created by Tails on #5766 (Redmine)
Tails should ship a (non-default) web browser profile that would not trust the CA cartel, but instead use some alternative, more agile and stronger trust system.
{{toc}}
Candidates
- monkeysphere (#5763 (closed))
- Convergence (#6102 (closed)) (dead upstream, rejected)
- TACK
- EFF’s sovereign keys
- Google’s proposal
See the blueprint for more detailed and up-to-date information.
Blueprint: https://tails.boum.org/blueprint/web_browser_profile_with_no_CA/
Related issues
- Related to #5870 (closed)
- Related to #5976
- Blocks #5763 (closed)
To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information