3

It's known, that if someone manages to install their certificate as a trusted certificate on your Windows computer, they can read all you SSl/TLS traffic with man-in-the-middle attack and you won't notice.

Is there a simple practical way of determining, if you have any of those certificates installed? When you look at your certificate store, there are a lot of certificates there, and most of them are legitimate ones. How can one tell which ones are "ok" and which ones may represent a security risk?

Improve this question

2 Answers 2

Reset to default
2

RCC or Sigcheck will do that for you. RCC checks the Firefox root store too.

Improve this answer
1

You may take a list you find apropriate - for example the CAs Mozilla comes preinstalled with - and check your trust store.

For extra tin foil, remove all and readd them from the list when you encounter a site that is untrusted but should be trusted;)

Improve this answer
2
  • Yeah, thanks. Manually checking one by one is not what I'd call practical. But thank you anyway.
    – Andrew Savinykh
    Mar 21, 2016 at 21:51
  • Stupid question, but how do you remove them, and re-add them all securely? (Without using a second, trusted, computer.)
    – Yuriko
    Apr 26, 2016 at 6:21

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.