Jeremy McAnally

@jm Chrome won’t even save this setting. Go back to settings and it’s not checked.

@jm @heroku Is there an equivalent I have to do for Firefox?

@jm @googlechrome @ChromiumDev why is SSL revocation check not enabled by default?

@langemeijer @jm @googlechrome in this case, it isn't an effective solution:https://twitter.com/agl__/status/453602748601495553 …

@ChromiumDev @jm @googlechrome I've renewed my potentially compromised keys & certs. Old certs should be revoked. How is this not effective?

@jm @maradydd Keep in mind that enabling cert revocation doesn't actually achieve anything. Any MITM attacker can still MITM you.

@agl__ @jm @maradydd It seems like CRL helps in this case if the server side is MITM'd, since we're not dealing with bad-actor CAs.

@xek @jm @maradydd If the MITM is near the server then they can pass DV checks and get certificates issued to themselves for that server.

@jm @BaldMan Heartbleed effect on Safari? Can't find anything.

@bdrileysaustin Hearbleed isn’t an issue with your browser, but with servers. So we have to wait for sites to patch SSL.

@jm @artywah Gr8 Idea, but how? Driving me mad the past four weeks

@rightfuture @jm settings > advanced > click the box. Also this extn checks if a site you're on is affected http://argh.zomb.ee/Q2lZoW