provide latest OS root certificates via port?

[Steven Smith]

> ANY "modern", "secure" OS is an inherent time-death, for no good reason.

Yes they are, but for good reasons. 

People discover vulnerabilities and patch them. Unpatched systems are vulnerable. This happens for all sorts of technical issues, especially PKI. For example,

Analysis of SSL Certificate Reissues and Revocations in the Wake of Heartbleed
https://dl.acm.org/doi/pdf/10.1145/3176244

Trusting old PKI is a Bad Idea.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.macports.org/pipermail/macports-users/attachments/20211029/2b38ff9b/attachment.htm>