3 ms·
Pretty funny. Chrome has always claimed to be more secure because it makes it a pain in the ass to browse sites with expired certs - something almost always jus
by lnanek2 13y ago
Pretty funny. Chrome has always claimed to be more secure because it makes it a pain in the ass to browse sites with expired certs - something almost always just site error. But not they've messed up in a very visible revocation case and are least secure. :)
Too bad it didn't break CloudFlare. I really hate that service. Several web sites I use, if they give me an error from a form or such, CloudFlare will just give me a cached page and I have no clue what was wrong because I can't read the actual HTTP response sent to me. ;/
- tptacek 13y agoThey haven't messed up. They've thought more about the revocation issue than almost anyone else on the Internet, and come to the conclusion that the costs aren't worth the benefits. They appear to be right; SSL revocation is a debacle, and, for most browser configurations, is mere theater. Here's a starting point for understanding how under-designed online revocation is for SSL/TLS: https://bugzilla.mozilla.org/show_bug.cgi?id=643907 https://bugzilla.mozilla.org/show_bug.cgi?id=643907
- deleted 13y ago[deleted]