SecureAPlus: Allow Microsoft Trusted Certificate List?

[shmu26]

I am trying to configure the SecureAPlus whitelisting settings, and one of the options is to allow anything on the Microsoft Trusted Certificate List to be trusted as an installer.
Is the Microsoft list safe, more or less?

 

[jamescv7]

There are circumstances that Microsoft Trusted Certificate can be abused by intruders as meant of bypass which why the configuration is disabled by default as it can reduce the protection.

But still its only a 'circumstance', it can happen but not prevalent anywhere.

 

[_CyberGhosT_]

IMHO if your not an advanced user I would leave that at the default.
The call is yours though.
PeAcE

 

[shmu26]

SAP support staff answered me that Microsoft Trusted Certificate List is the least restrictive of their 3 trust options.
I discovered that you can turn off trust altogether in SAP, and the result -- according to their support staff -- is that application will be trusted solely on the basis of hashes. This produces more prompts for user decisions, of course.