Re:Wildcard Certificates Coming January 2018
by BenjiWiebe on Friday July 07, 2017 @10:04AM
(#14718375)
It's been awhile since I had to deal with ocsp breakage, but if it breaks due to an ocsp server down, doesn't that mean the browser or web server is misconfigured? Of course, if browsers are misconfigured out of the box, that doesn't help at all...
[ Parent
| on HN ]
Re:Wildcard Certificates Coming January 2018
by discreditable on Friday July 07, 2017 @12:07PM
(#14719513)
It wasn't as simple as the ocsp server being down. It was returning bad request (http 400) responses. When the good responses expired from caches, the bad responses started going out and breakage started spreading. LE detailed this in their postmortem which I linked.