Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I did read the article.

> "In order to end on a positive note, I'll mention a case where online revocation checking does work..."



Funny how you didn't quote the actual case mentioned, just the text ahead of it. Ctrl-F'ing a little quick, eh?


That's even more proof you didn't read it. How does enabling it in chrome make any difference to code signing?


Does enabling revocation checking make me less safe?


Yes! It involves you reporting all the sites you visit to a CA!


I guess I knew that but hadn't grasped the security problem this presents. You've changed my mind. Thank you.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: