I wonder how many followers know what the CAB forum is/the irony ;-)
-
-
-
probably over 67%. My followers are the best.
Kraj razgovora
Novi razgovor -
-
-
wow, i'm very surprised to learn a major browser does ocsp hard-fail.
-
You have to explicitly turn it on in Firefox, but I (obviously) do.
Kraj razgovora
Novi razgovor -
-
-
Stapling? (Yes, only moves the problem but mitigates it significantly).
-
Yeah, it's live OCSP that's the problem. Stapling is _an_ answer, but as you said, it's not perfect either.
Kraj razgovora
Novi razgovor -
-
-
works here with Chrome/FF/Safari, ssltest is not too happy but does not complain about OCSP https://www.ssllabs.com/ssltest/analyze.html?d=www.cabforum.org …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
(revocation/OCSP is still a nightmare though)
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
. @jamespugjones
@agl__ Or is it design flaw in Firefox? Other chain-building engines fallback to CRL when fresh OCSP not availableHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.