[tor-talk] is Torbrowser more affected by webservers failing to send their complete certificate chain?
johndoe65534 at mail.com
Tue Aug 7 14:10:27 UTC 2018
On 8/7/2018 3:50 PM, Nathaniel Suchy wrote:
> Could you list some example websites that have this problem?
> On Tue, Aug 7, 2018 at 8:08 AM nusenu <nusenu-lists at riseup.net> wrote:
>> I assume that Torbrowser users are more affected by webservers
>> that do not send their complete certificate chain (incl. interm. CAs)
>> due to the fact that torbrowser stores/caches less data (including certs?)
>> an example of a page that results in an TLS error page in Torbrowser due
>> to incomplete cert. chain:
>> With the growing number of sites deploying HSTS, the impact is even bigger.
>> Should Torbrowser ship a few common interm. CAs by default? (like the
>> letsencrypt issuing CAs)
The first URL in the OP question fills the bill.
More information about the tor-talk