Does this mean I should turn "security.OCSP.require" back off in Firefox? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

zahlman 9 months ago | parent | context | favorite | on: OCSP Service Has Reached End of Life

Does this mean I should turn "security.OCSP.require" back off in Firefox?

mcpherrinm 9 months ago [–]

For Let’s Encrypt certificates which no longer contain an OCSP URL, I don’t think it’ll have any effect.

Firefox also already has more effective revocation checking in CRLite: https://blog.mozilla.org/en/firefox/crlite/

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact