[tor-talk] is Torbrowser more affected by webservers failing to send their complete certificate chain?
nusenu-lists at riseup.net
Tue Aug 7 12:07:00 UTC 2018
I assume that Torbrowser users are more affected by webservers
that do not send their complete certificate chain (incl. interm. CAs)
due to the fact that torbrowser stores/caches less data (including certs?) persistently.
an example of a page that results in an TLS error page in Torbrowser due to incomplete cert. chain:
With the growing number of sites deploying HSTS, the impact is even bigger.
Should Torbrowser ship a few common interm. CAs by default? (like the letsencrypt issuing CAs)
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 833 bytes
Desc: OpenPGP digital signature
More information about the tor-talk