Re: NSM certificate prompt

[Michael Albinus]

Eli Zaretskii <address@hidden> writes:

>> The problem is to distribute and maintain such root
>> certificates. Browsers have them built-in, but I don't believe Emacs
>> (eww) shall do so.
>
> GnuTLS on Windows uses the CertEnumCertificatesInStore API to retrieve
> all the Root and Certification Authority certificates known to the
> system.  I suppose at least IE uses the same API, so I wonder how come
> GnuTLS fails to validate the certificates, while IE succeeds.

As usual, I cannot speak about MS Windows. But even if IE uses the same
API, it might read the root certificates from somewhere else.

And like other browsers, it might also carry builtin root certificates inside.

Best regards, Michael.