3 ms·
I don't see anything about OCSP policy changing in the Mozilla CA Program Policy release notes [1] or Chrome's [2], so I wonder if Microsoft was more proactive
by nick238 2y ago
I don't see anything about OCSP policy changing in the Mozilla CA Program Policy release notes [1] or Chrome's [2], so I wonder if Microsoft was more proactive (for better or worse) in requiring it vs. other popular root programs.
[1]: https://wiki.mozilla.org/CA/Root_Store_Policy_Archive https://wiki.mozilla.org/CA/Root_Store_Policy_Archive
[2]: https://www.chromium.org/Home/chromium-security/root-ca-policy/ https://www.chromium.org/Home/chromium-security/root-ca-poli...
- agwa 2y agoMozilla and Chrome were requiring it via the incorporation of the Baseline Requirements into their policies. The removal of the requirement from the BRs won't appear in the release notes of their policies.
- mcpherrinm 2y agoMicrosoft has always had stricter requirements for OCSP than the baseline requirements, which the other root programs have not had. With the CA/Browser forum baseline requirements amended to no longer require OCSP, it is Microsoft's requirements alone that require OCSP.