[cabfpub] FW: Short lived OCSP signing certificate
Eddy Nigg (StartCom Ltd.)
eddy_nigg at startcom.org
Thu Sep 20 03:29:50 MST 2012
On 09/20/2012 11:48 AM, From Rob Stradling:
> Do you think browsers should block access to sites that use expired
> certs (in the same way that they block access to sites that use
> revoked certs)?
I think so - with the possibility for admins to override it. But that
shouldn't the casual "Please click me through" thing...
Regards
Signer: Eddy Nigg, COO/CTO
StartCom Ltd. <http://www.startcom.org>
XMPP: startcom at startcom.org <xmpp:startcom at startcom.org>
Blog: Join the Revolution! <http://blog.startcom.org>
Twitter: Follow Me <http://twitter.com/eddy_nigg>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://cabforum.org/pipermail/public/attachments/20120920/55989af1/attachment.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4506 bytes
Desc: S/MIME Cryptographic Signature
Url : http://cabforum.org/pipermail/public/attachments/20120920/55989af1/attachment.bin
More information about the Public
mailing list