5 ms·
> Because secure browsers like Chrome require certificate transparency for it to trust the cert. And if it was found out to be fraudulent? "Secure" Chrome woul
by zinekeller 4y ago
> Because secure browsers like Chrome require certificate transparency for it to trust the cert.
And if it was found out to be fraudulent? "Secure" Chrome would do f***all unless you're PayPal while "insecure" Firefox always checks if the certificate is still valid.
- agsnu 4y agoSince OCSP fails open and response stapling is still only deployed on a minority of servers, it doesn’t provide much of a guarantee…