I know that I can simply make my own private certificate authority that only I and my family trust. But is there some public provider like letsencrypt that is in a free-er part of the world than the US?
I know that I can simply make my own private certificate authority that only I and my family trust. But is there some public provider like letsencrypt that is in a free-er part of the world than the US?
Certificate revocation is a joke and has been for over a decade
Huh, FF on Android doesn’t care.
Most browsers don’t, hence my calling revocation a joke.
So many in this thread are up in arms about something the majority of browsers don’t care about and have actively ignored for as long as I can recall
Yeah, I was just surprised bc the page explicitly lauds FF for checking revocation.
It may only be the desktop version, most mobile browsers aren’t as feature complete as their desktop counterparts.
But, given Google ripped revocation checking out of chromium, I wouldn’t be surprised if they nerfed it in Android too…
If the certificate only lasts two months revocation isn’t necessary, just deny recertification.
And what if you need to get a new certificate?
You go to a different CA
That’s the question of this thread. Yes.
Aren’t we back at OP’s question?