[Outages-discussion] [outages] paypal.com certificate revoked?

[Lukas Tribus]

I didn't have a Chrome desktop browser at hand this morning.

Google blocks revoked.badssl.com because it's in the static Google
CRLSet/Blocklist.
Firefox blocks revoked.badssl.com because of what OCSP returns.

https://crt.sh/?id=5665221719&opt=ocsp


The point is:
Firefox uses OCSP, Chrome doesn't.


Lukas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/outages-discussion/attachments/20221015/9e0b9d29/attachment.htm>