Managing SSL Certificate Bundles

That IE feature sounds like a bit of a security hole... Albeit a small one. But could be serious where you really do want to remove a Ca cert.. I cant think any time if like my ca certs automatically updated when id just removed one... Whether the browser was restarted (which should lose the ssl session) or not.

 

 

I normally dont use browsers for testing stuff like SSL. I use openssl to do it from he command line of a linux (Or mac) client somewhere on the network. Far more info and way easier to diagnose where issues lie than the wooliness wrapped around the browser

 

 

H