3 ms·
This change has caused so much pain in our internal network too. Not because of intercepting proxies, but because of a ton of certs signed by an I terns CA. I
by pilif 9y ago
This change has caused so much pain in our internal network too. Not because of intercepting proxies, but because of a ton of certs signed by an I terns CA.
I really wonder what kind of issue triggered them changing this and whether it was Wort the trouble. Stuff like this is why I can understand companies still being reluctant to allow browsers other than IE
- picofish 9y agoi think it was because the rfc that says which attributes of a cert must be checked by the browser was deprecated 15 years ago and everybody ignored the update (that says that the san attribute must be present)