3 ms·
I would assume the cert was revoked, this is about how they do not trust any cert signed by the same authority.
by cleverjake 14y ago
I would assume the cert was revoked, this is about how they do not trust any cert signed by the same authority.
- lmz 14y agoEven if the certificate was revoked, how do the Android devices know that the certificate was revoked? Do they regularly update CRLs or do they check using an online protocol e.g. OCSP?
- RyanZAG 14y agoDo SSL libraries in Java/ObjC use OCSP correctly? As far as I can tell, Android has OCSP disabled by default as the increased latency can be harmful on mobile. I believe Firefox has OCSP disabled by default as well?