The difficulty of making sure your website is broken

9 comments

• paulirish 2 hours ago

  https://badssl.com/ also offers several test subdomains in the same vein.

• ipython an hour ago

  Interesting. Chrome (146, macOS) shows no error messages on the revoked cert pages, but Firefox does (also macOS).

  [-]
  • mcpherrinm an hour ago

    Yeah, Chrome only partly supports revocation (Not sure exactly the criteria, but our test sites don't match it).

  • moralestapia 38 minutes ago

    Same with Brave, so it is a Chromium thing.

• lifis an hour ago

  Vanadium, Chrome and Firefox (all for Android) all accept all the revoked certificates... But revoked.badssl.com is considered revoked

  [-]
  • RunningDroid 31 minutes ago

    > Vanadium, Chrome and Firefox (all for Android) all accept all the revoked certificates... But revoked.badssl.com is considered revoked

    Firefox Beta (150.0b7) is accepting all of the revoked certs on my device

• bullen 2 hours ago

  Meanwhile HTTP keeps working just fine and is decentralized.

  Just "add your own crypto" on top, which is the ONLY thing a sane person would do.

  3... 2... 1... banned?

  [-]
  • xandrius 2 hours ago

    Did you self-ban?

    [-]
    • bullen an hour ago

      XD Nope, more like self destruct! ;)