News for hackers. Stuff that matters.

A comment on Lavabit SSL Cert Revoked. Parent comment

Re:Lavabit SSL Cert Revoked by conductor on Tuesday October 08, 2013 @05:57PM (#6518092)
You can disable querying OCSP servers by setting the "security.OCSP.enabled" to false. This adds some privacy (otherwise OCSP servers can know and collect what SSL enabled sites you visit). Combined with the Certificate Patrol add-on [0] (to track certificate changes) this must be pretty secure, except when a certificate is being revoked you will not know about it automatically.

[0] - http://patrol.psyced.org

[ Parent | on HN ]
Re:Lavabit SSL Cert Revoked by newman314 on Tuesday October 08, 2013 @06:35PM (#6518299)
Which begs the question: "Better to enable OSCP and leak info or run the risk of a bad cert and disable OSCP?"
[ Parent | on HN ]