I think you've altered your settings at some point. It's not the default. You would see a huge influx of bugzilla entries of "Firefox is broken" if hard fail w

I think you've altered your settings at some point. It's not the default. You would see a huge influx of bugzilla entries of "Firefox is broken" if hard fail was the default. edit: the checkbox in the validation subdialog (ocsp.xul) is tied to security.OCSP.require, which is set here with a default of false in the Firefox source: http://dxr.mozilla.org/mozilla-central/source/netwerk/base/public/security-prefs.js#55 http://dxr.mozilla.org/mozilla-central/source/netwerk/base/p...