4 ms·
Chrome 6.x should be able to work around this on all platforms at the cost of making the site slower. This sounds, uh, weird. Got a link to more information?
by thwarted 16y ago
Chrome 6.x should be able to work around this on all platforms at the cost of making the site slower.
This sounds, uh, weird. Got a link to more information? I'd like to see the rationale for having the browser subvert misconfigured servers; this would seem to undermine the already precarious SSL state we're in.
- agl 16y agoChrome 6 uses NSS on all platforms and NSS will download missing intermediate certificates via HTTP, if the URL is given in an AIA extension. This is pretty much standard browser behaviour I'm afraid. One of the many unfortunate realities of the web.