The difficulty of making sure your website is broken (letsencrypt.org)
28 points by mcpherrinm 3 hours ago
paulirish 2 hours ago
https://badssl.com/ also offers several test subdomains in the same vein.
ipython an hour ago
Interesting. Chrome (146, macOS) shows no error messages on the revoked cert pages, but Firefox does (also macOS).
mcpherrinm an hour ago
Yeah, Chrome only partly supports revocation (Not sure exactly the criteria, but our test sites don't match it).
moralestapia 38 minutes ago
Same with Brave, so it is a Chromium thing.
lifis an hour ago
Vanadium, Chrome and Firefox (all for Android) all accept all the revoked certificates... But revoked.badssl.com is considered revoked
RunningDroid 31 minutes ago
> Vanadium, Chrome and Firefox (all for Android) all accept all the revoked certificates... But revoked.badssl.com is considered revoked
Firefox Beta (150.0b7) is accepting all of the revoked certs on my device
bullen 2 hours ago
Meanwhile HTTP keeps working just fine and is decentralized.
Just "add your own crypto" on top, which is the ONLY thing a sane person would do.
3... 2... 1... banned?
xandrius 2 hours ago
Did you self-ban?
bullen an hour ago
XD Nope, more like self destruct! ;)