logoalt Hacker News

stonogo • today at 3:28 PM • 1 reply • view on HN

Every certificate library has to implement its own blocking no matter which platform you run on. Windows provides an API to do this at the system level, which means nothing if a given application vendors their own TLS library.


Replies

agwa • today at 3:43 PM

It's uncommon on Windows for applications to use a third party certificate verification library because Windows provides an API that does it. On Linux, you have no choice because all the platform provides is a bundle of PEM certificates.

➕ show 1 reply