15 ms·
is this specific page supposed to show as revoked? its not showing as revoked for me in firefox, but https://revoked.badssl.com/ https://revoked.badssl.com/ doe
by snailmailman 1y ago
is this specific page supposed to show as revoked? its not showing as revoked for me in firefox, but https://revoked.badssl.com/ https://revoked.badssl.com/ does so i know my browser is doing revocation checking. I'm curious whats happening here.
- zephyreon 1y ago> https://revoked.badssl.com https://revoked.badssl.com This loads fine in Safari on iOS 26 lol.
- monkaiju 1y agoAlso in Fennec 129...
- deleted 1y ago[deleted]
- tsimionescu 1y agorevoked.badssl.com is showing up for me in Firefox on mobile just fine, so perhaps there is some nondeterminism here in some way? To be fair, this would be even more bizarre...
- lucumo 1y agoInterestingly Chrome 140.0.7339.51 on Android 16 blocks it with a net::ERR_CERT_REVOKED error. I always thought Chrome didn't block them and that revocation was pretty much dead.
- lucumo 1y agoTo clarify, https://revoked.badssl.com/ https://revoked.badssl.com/ is the one being blocked. https://revoked-isrgrootx1.letsencrypt.org/ https://revoked-isrgrootx1.letsencrypt.org/ shows just fine.
- prirai 1y agoThe certificate expiry is Dec 2025 so it's valid.
- mholt 1y agoThis page is to demonstrate that revocation is broken. There is no central revocation authority. Anyone can publish a revocation list, whether it's a CA or client vendors or Joe from his mom's basement. I'm using the term "revocation list" loosely, as it can be as simple as a list of public keys to distrust. Client software can use any revocation list they want, AFAIK.