Hacker News Reader

> Use system CAs instead of using bundled ones

Does this make the npmrc config for cafile redundant now in my MITM environment? The amount of projects that just can't handle the CA or worse, a proxy setting, is very irritating.

Will we not have to make a separate config for every app that also bundles node (e.g. vscode) or anything that uses node to get a file (vue-cli, node-pre-gyp, etc)?

View on HN

I recently left a job that has a proxy. I would estimate the my time spent there working on proxy related issues to be more than 2 months over the 5 years I was there. Is it too unreasonable to evaluate the cost of these proxies beyond the maintenance cost?

You can specify your own CA store or revert to the OpenSSL one with `--use-openssl-ca`, `SSL_CERT_DIR` and `SSL_CERT_FILE`. See: https://github.com/nodejs/node/blob/master/doc/api/cli.md#--...

The PR is pretty good: https://github.com/nodejs/node/pull/8334/files

Reply on news.ycombinator.com