On 1/14/26 07:10, Thérèse Godefroy via Discussions among Savannah
Hackers, open subscription wrote:
Hello,
Mirmon can't download the timestamp from mirror.ibcp.fr, most likely
because it can't find the new version (2021) of the HARICA TLS root
certificate. Could you please add this certificate to the machine that
runs Mirmon? It is attached. Thanks in advance.
Best,
Thérèse
I really hate to have to point this out, but you just sent a proposed
trust anchor to the list with no information whatsoever to validate that
it really is the root certificate that it purports to be. In fact, the
message itself is unauthenticated: the Savannah admins have no solid
proof that this is you offering this certificate and not Mallory wearing
a "Thérèse Godefroy" mask offering a fake certificate in furtherance of
some malicious scheme.
Please think about what damage Mallory could do by impersonating you in
this matter, if a phony root certificate were to be accepted.
Could you provide pointers to HARICA themselves or some other
trustworthy source for this certificate, instead of suggesting "here,
install this root certificate from this email"?
-- Jacob
