Browser-Specific CA Trust Management

Different browsers handle CA trust differently. Chrome and Edge use system certificate stores on Windows and macOS. Firefox maintains its own certificate store, requiring separate trust configuration. Mobile browsers add additional complexity with limited trust management options.

Manage browser trust stores:

# Firefox CA trust
certutil -A -n "My Private CA" -t "TCu,Cu,Tu" -i ca.crt -d ~/.mozilla/firefox/*.default-release

# Chrome/Linux CA trust
sudo cp ca.crt /etc/pki/ca-trust/source/anchors/
sudo update-ca-trust

# macOS system trust
sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ca.crt