undefined | Better HN

0 pointsvetrom2y ago0 comments

Lots of browsers avoid it for reasons, but isn't this the whole point of the OCSP(https://en.m.wikipedia.org/wiki/Online_Certificate_Status_Pr...) and OCSP stapling?

0 comments

1 comments · 1 top-level

Yes, protocols for this exist... but as you said, browsers tend to avoid them.

Edit: Firefox seems to check revocation by default. https://revoked.badssl.com/ if you want to test.

j / k navigate · click thread line to collapse