News for hackers. Stuff that matters.
Re:addons.thunderbird.net SSL certificate has expired by thayne on Monday August 09, 2021 @11:56AM (#28118468)
Would requiring OCSP stapling fix 1 without the privacy concerns?
Re:addons.thunderbird.net SSL certificate has expired by tialaramex on Monday August 09, 2021 @12:53PM (#28119244)
In the sense that you, as the owner of a name, can choose to have your certificate say it must always be presented with OCSP stapling, and thereby your certificate can have revocation that works without privacy concerns?

Yes.

But for the larger global problem, OCSP stapling is a solution in the same sense that "Don't dig up any more coal, oil or gas" is a solution. Yes, I urge you to do this in both cases. It's a good idea. But, is everybody going to do it tomorrow? Next year? In my lifetime?

Re:addons.thunderbird.net SSL certificate has expired by thayne on Monday August 09, 2021 @05:27PM (#28122522)
I mean if browsers started doing something like marking sites that didn't have OCSP stapling as potentially insecure, or otherwise pushed for it.