4 ms·
Mandatory OCSP is security theater? That’s a pretty bold claim.
by johncolanduoni 6y ago
Mandatory OCSP is security theater? That’s a pretty bold claim.
- josephcsible 6y agoMandatory OCSP that fails open when you're offline is security theater.
- snowwrestler 6y agoOCSP fails open by definition because it is a revocation protocol. In the absence of revocation, a valid cert continues to be valid. The problem here is simply that Apple did not build a short enough timeout into their client.
- anticensor 6y agoMake OCSP fail locked and it would be a software imprisonment protocol instead.