3 ms·
Lots of browsers avoid it for reasons, but isn't this the whole point of the OCSP(https://en.m.wikipedia.org/wiki/Online_Certificate_Status_Protocol https://en.
by vetrom 2y ago
Lots of browsers avoid it for reasons, but isn't this the whole point of the OCSP(https://en.m.wikipedia.org/wiki/Online_Certificate_Status_Protocol https://en.m.wikipedia.org/wiki/Online_Certificate_Status_Pr...) and OCSP stapling?
- tgsovlerkhgsel 2y agoYes, protocols for this exist... but as you said, browsers tend to avoid them. Edit: Firefox seems to check revocation by default. https://revoked.badssl.com/ https://revoked.badssl.com/ if you want to test.