Re:addons.thunderbird.net SSL certificate has expired
by tialaramex on Monday August 09, 2021 @12:53PM
(#28119244)
In the sense that you, as the owner of a name, can choose to have your certificate say it must always be presented with OCSP stapling, and thereby your certificate can have revocation that works without privacy concerns?
Yes.
But for the larger global problem, OCSP stapling is a solution in the same sense that "Don't dig up any more coal, oil or gas" is a solution. Yes, I urge you to do this in both cases. It's a good idea. But, is everybody going to do it tomorrow? Next year? In my lifetime?
Yes.
But for the larger global problem, OCSP stapling is a solution in the same sense that "Don't dig up any more coal, oil or gas" is a solution. Yes, I urge you to do this in both cases. It's a good idea. But, is everybody going to do it tomorrow? Next year? In my lifetime?