Joonas Lehtonen wrote: > Is there any kind of certificate pinning in place when verifying the > certificate of https://mirrors.fedoraproject.org or can the > certificate be from any trusted CA? I strongly suspect the answer is "any trusted CA" -- rex -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org