[gentoo-dev] Gentoo and Root CAs

[Tobias Klausmann]

Hey,

Ryan Sleevi, who's working on Chromium and is familiar with other
project's Root Cert programs has written an article on how he
perceives assorted distributions handle Root CAs:

https://plus.google.com/u/0/105761279104103278252/posts/eVdB6X3NpPg

"""
[...]
Debian: From [5]. According to README.debian, to get a CA
included, all you need is two or three people to support you.

Gentoo: From [6] Same as Debian. Note they also modify other
packages (such as dev-libs/nss) to inject root certs into other
programs' root stores.
[...]
References:
[5] http://packages.debian.org/squeeze/all/ca-certificates
[6] http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/app-misc/ca-certificates/
"""

Now before you reply, RTFA. Also note that while my own opinion
on the matter is irrelevant, I _do_ think that his concerns need
to be addressed, particularly the second half of his statement.


Regards,
Tobias