Hacker News new | past | comments | ask | show | jobs | submit
Certainly you're aware that every certificate sits in a separate file and an update can just remove the interested files?
I would be aware of that if it were true, but (surprise!) it's not

not convinced? take a look at your /etc/ssl/cert.pem

dpkg --listfiles ca-certificates

Well looks like they should take the hint from a better vendor such as Debian then :)

It doesn’t look like that, it looks like it’s a cert.pem file.