Excellent, just what I was looking for and incidentally a source I can cite to my client. Many thanks!
On 25 November 2013 17:24, Ralph Holz <ralph-devn...@ralphholz.de> wrote: > Hi, > > > > Thanks for your response. I'm sorry my question wasn't clearly defined > > (it was "will this file work correctly? If so, why?"), but you seem to > > have answered nonetheless, thank you. > > > > As a followup question, is there a way to include these certs in the way > > originally intended by the mozilla file (blocking them)? In any case, I > > There is: > > https://github.com/agl/extract-nss-root-certs > > If you need to work on (much) older root stores, too: > > https://github.com/ralphholz/root-store-archaeology > > Ralph >