Guides
How Java decides which certificates to trust: cacerts, keytool and revocation
A step-by-step guide to the Java trust store, the keytool commands to inspect and edit it, why revocation is off by default, and a routine for the next CA compromise.
audiotale.net team7 min read