We believe that revoking those actively in-use certificates would have harmed the web because many users, upon encountering the revocation errors, would look up instructions on how to bypass revocation checks. For instance, the top Google result for [SEC_ERROR_REVOKED_CERTIFICATE firefox] right now is https://support.mozilla.org/en-US/questions/856276 [mozilla.org], which says 'You can uncheck "Use the OCSP to confirm the current validity"'. Those users are unlikely to re-enable revocation checks once they are done using the affec
ユーザーがrevocation checkを無視するから (スコア:2, 興味深い)
リンク先によれば、「大量の証明書を一度にrevokeすると、ユーザーはブラウザの設定を変更してrevocatioチェックを無効化するだろう。そのようなユーザーはおそらく問題が収まっても設定を戻したりしない」というのが理由らしい。まあわからんでもない。
We believe that revoking those actively in-use certificates would have harmed the web because many users, upon encountering the revocation errors, would look up instructions on how to bypass revocation checks. For instance, the top Google result for [SEC_ERROR_REVOKED_CERTIFICATE firefox] right now is https://support.mozilla.org/en-US/questions/856276 [mozilla.org], which says 'You can uncheck "Use the OCSP to confirm the current validity"'. Those users are unlikely to re-enable revocation checks once they are done using the affec
Re:ユーザーがrevocation checkを無視するから (スコア:0)
デフォルトの設定が証明書エラーを数クリックで無視できる今のブラウザってどいつもこいつもおかしいよね