undefined | Better HN

0 pointsAvamander5y ago0 comments

When OCSP is down nothing happens with most browsers. Except-Staple might worsen it a bit, but how many use that?

0 comments

My point is that connecting with OCSP down carries the exact same risk that accepting an expired certificate does. In both cases, the risk is that the certificate might have been revoked without you knowing it.

j / k navigate · click thread line to collapse

0 comments

josephcsible5y ago

j / k navigate · click thread line to collapse