Why are certs available to see before login?

I was messing around with the portal a little bit and realized, when at the login prompt, in the hamburger menu in the top right, I am able to see and download the root certificate. Why is this? Why would this be visable to anyone not logged in at least? Isn’t this a security risk?

why should this be a security risk ?
its only public cert

rg
christian

Hello HenryOSullivan,

as @externa1 pointed out this is a public certificate and they are meant to be public, exposing this certificate does no harm.
To enable encrypted communication clients need to trust the domains certificate authority, the certificate is needed to initiate this process.

Best regards
Jan-Luca

Mastodon