Outdated: Windows XP Component "Update Root Certificates"

This section describes the process used by Windows XP component, Update Root Certificates, to communicate to Windows Update Website to fetch a trusted root certificate and install in on the local computer automatically.

To understand better why IE 8 is automatically reinstall a trusted root certificate on my computer, I did a quick research and found this article "Certificate Support and the Update Root Certificates Component" on Microsoft Website:

Using Microsoft Windows XP Professional with Service Pack 1 in a Managed Environment: Controlling Communication with the Internet - Certificate Support and the Update Root Certificates Component - Published: December 27, 2004 ...

How Update Root Certificates Communicates with Sites on the Internet

This subsection focuses on how the Update Root Certificates component communicates with sites on the Internet. The previous subsection, "Overview: Using Certificate Components in a Managed Environment" provides references for the configuration choices that control the way other certificate components communicate with sites on the Internet.

If the Update Root Certificates component is installed on a user's computer, and the user's application is presented with a certificate issued by a root certification authority that is not directly trusted, the Update Root Certificates component communicates across the Internet as follows:

Now I understand better what happened when visiting a secured Website using IE 8 and the root certificate for that Website is not installed on my Windows XP system:

Table of Contents

 About This Book

 Introduction of PKI (Public Key Infrastructure)

 Introduction of HTTPS (Hypertext Transfer Protocol Secure)

 Using HTTPS with Google Chrome

 Using HTTPS with Mozilla Firefox

 HTTPS with Microsoft Edge

 Using HTTPS with Apple Safari

 HTTPS with IE (Internet Explorer)

 Android and Server Certificate

 iPhone and Server Certificate

 Windows Certificate Stores and Console

 RDP (Remote Desktop Protocol) and Server Certificate

 macOS Certificate Stores and Keychain Access

 Perl Scripts Communicating with HTTPS Servers

 PHP Scripts Communicating with HTTPS Servers

 Java Programs Communicating with HTTPS Servers

 .NET Programs Communicating with HTTPS Servers

 CAcert.org - Root CA Offering Free Certificates

 PKI CA Administration - Issuing Certificates

 Comodo Free Personal Certificate

 Digital Signature - Microsoft Word

 Digital Signature - OpenOffice.org 3

 S/MIME and Email Security

 PKI (Public Key Infrastructure) Terminology

Outdated Tutorials

 Outdated: Viewing Server Certificate in Chrome 40

 Outdated: Viewing Server Certificate in Firefox 35

 Outdated: Viewing Pre-Installed Certificates in Firefox 35

 Outdated: Firefox 35 Displaying Certificate Error Page

 Outdated: Adding Security Exception in Firefox 35

Outdated: Windows XP Component "Update Root Certificates"

 Outdated: Creating Certificates Console on Windows XP

 Outdated: Applying Digital Signatures with Word 2007

 OutDated: Creating a Digital ID and Sign Word Documents

 OUtdated: Viewing Digital ID Created by MS Word

 Outdated: Obtaining a Trial Digital ID from ARX CoSign

 Outdated: Viewing Digital ID Obtained from ARX CoSign

 Outdated: Windows XP Component - Removing "Update Root Certificates"

 Outdated: IE 8 Displaying Certificate Error Page

 Outdated: IE 8 Displaying Certificate Error Icon

 Outdated: Viewing Certificate Path Validation Error in IE 8

 Outdated: Importing Root Certificate from a File to IE 8

 References

 Full Version in PDF/EPUB