- hardening your system:
- remove/disable “root CAs belonging to the U.S. government”
- on OS X: “DoD Root CA 2” and “DoD CLASS 3 Root CA”
- why? carnivore, echelon, Clipper chip, NSA data center,
- (update 2023) may become illegal in the EU: eIDAS
- remove/disable “root CAs belonging to the U.S. government”
- hardening network access:
- set up port knocking