News for hackers. Stuff that matters.

A comment on Tor Browser disabled NoScript, but can't update. Parent comment

Re:Tor Browser disabled NoScript, but can't update by crehn on Sunday May 05, 2019 @12:39PM (#19833601)
Seems that Firefox skips revocation checks for CA certs [1].

[1] https://wiki.mozilla.org/CA/Revocation_Checking_in_Firefox

[ Parent | on HN ]
Re:Tor Browser disabled NoScript, but can't update by marcinzm on Sunday May 05, 2019 @01:40PM (#19833918)
Where does it say that? The link says they centrally manage revocations using OneCRL and then push a single revocation list to browsers (independent of browser updates). Which means they can revoke any certificate they want using that mechanism.
[ Parent | on HN ]
Re:Tor Browser disabled NoScript, but can't update by crehn on Sunday May 05, 2019 @01:50PM (#19833982)
Ah, you're correct. Seems they skip CA CRL/OCSP in favor of their own CRL. Thanks for the correction.
[ Parent | on HN ]