[Webkit-unassigned] [Bug 171609] [Cocoa] Stop performing caching of intermediate TLS certificates

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed May 3 17:16:12 PDT 2017


https://bugs.webkit.org/show_bug.cgi?id=171609

--- Comment #7 from Michael Catanzaro <mcatanzaro at igalia.com> ---
(In reply to Michael Catanzaro from comment #6) 
> But my Google contact is telling me they think you do *both* intermediate
> certificate caching *and* authority information access lookup. It would be
> great if you could confirm this, since if Safari is indeed caching
> intermediate certificates, that is independently a bad thing.

Actually I misunderstood his mail, he's saying he thinks you are doing only AIA. If your TLS people can verify that, then this bug report should be closed as invalid (and sorry for the false alarm). I have learned a lot about this today....

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170504/274bea22/attachment.html>


More information about the webkit-unassigned mailing list