Certificate exception for github.com not working with built-in root CAs removed
| Newsgroups | gmane.comp.mozilla.security |
|---|---|
| Message-ID | <[email protected]> |
Hello everybody, I'm seeing following issue on current releases of both, Firefox and Thunderbird: If one removes all built-in root CAs in the Certificate Manager and adds a server exception for github.com, no connection is possible (Error code: sec_error_unknown_issuer). While other servers, e.g., www.joomla.org, www.auswaertiges-amt.de can be connected to without problems. What can be seen on https://www.ssllabs.com/ssltest/analyze.html?d=github.com is that it supports HSTS, while the two working above don't. Could there be an issue with that here? Many more details on https://bugzilla.mozilla.org/show_bug.cgi?id=1202511 Best, Joe