Re: CA Certificates

On Thu, Apr 7, 2022 at 9:40 AM Rob Berendt <rob@xxxxxxxxx> wrote:

Brad,
<snip>
So then when I found out I could bypass the "trust" I added that in and my
life has 50% more free time. :)
</snip>

If we do not turn on HTTP Strict Transport Security, which does this:
"Including this header will instruct supported browsers to prevent all HTTP
communication by enforcing HTTPS and blocking users from overriding invalid
certificate warnings." then we will fail audits.

Well, not exactly the same thing. What I was referencing were SSL API
options that allow you to programmatically bypass the "Not Trusted" error
when making requests as a client. But, even so, in your case, if that
fails audits, you wouldn't turn this flag on and need to learn how to
import the CAs required.

I imagine those same audits may eventually fail using user/pw
authentication for vs something like OAuth as well.

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 7310 Innovation Blvd, Suite 104
Ft. Wayne, IN 46818
Ship to: 7310 Innovation Blvd, Dock 9C
Ft. Wayne, IN 46818
http://www.dekko.com
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com