Two of the new reporting features in https://report-uri.com currently require additions to the HSTS Preload List in Chromium. Here's a quick guide on how to request your site be added. Update 2nd May: I wrote this blog some time ago and have only just published it now. I'm…
Tag: OCSP Expect-Staple
Total 3 Posts
I've talked about OCSP Stapling in the past and more recently about the new Must-Staple flag you can set in your certificates, but there's a bit of a problem. To go from not implementing Must-Staple straight to implementing it without any testing to see if you're ready is a bit…
OCSP Expect-Staple is a new reporting mechanism to allow site owners to monitor how reliable their OCSP Stapling implementation is. With live feedback coming direct from the browser, you can build confidence before enforcing OCSP stapling with OCSP Must-Staple. Fixing revocation I don't need to talk about how broken revocation…
