excludePublicCaSet property

bool? excludePublicCaSet
getter/setter pair

If FALSE (the default), use our default set of public CAs in addition to any CAs specified in trust_config.

These public CAs are currently based on the Mozilla Root Program and are subject to change over time. If TRUE, do not accept our default set of public CAs. Only CAs specified in trust_config will be accepted. This defaults to FALSE (use public CAs in addition to trust_config) for backwards compatibility, but trusting public root CAs is not recommended unless the traffic in question is outbound to public web servers. When possible, prefer setting this to "false" and explicitly specifying trusted CAs and certificates in a TrustConfig. Note that Secure Web Proxy does not yet honor this field.

Optional.

Implementation

core.bool? excludePublicCaSet;