2 ms·

Personally, I am for an overridable hard-fail option for OCSP, which should not be the default for now. What I want is an actual interstitial with an override o

by yuhong 12y ago

Personally, I am for an overridable hard-fail option for OCSP, which should not be the default for now. What I want is an actual interstitial with an override option, because it will show before the HTTP request is sent.

agwa 12y ago
How would users possibly know when it's safe to override an OCSP error?
- yuhong 12y ago
  Yea, there always would be a risk, but the user can evaluate the situation and determine whether it would be acceptable. This is part of why I said it would not be enabled by default for now though.