Re: what is the “Online Certificate Status Protocol”

2011-03-09 Thread Bayard Bell
The simple answer as to why OCSP isn't itself via HTTPS is that this would be a cyclical dependency: if you need to accept a certificate, you need to confirm its continuing validity. If you have to use a connection relying on that same logic to confirm validity, at what point are you then able to m

Re: what is the “Online Certificate Status Protocol”

2011-03-09 Thread Joachim Schipper
On Wed, Mar 09, 2011 at 03:03:22PM -0430, Andres Perera wrote: > On Wed, Mar 9, 2011 at 9:27 AM, Joachim Schipper > wrote: > > On Wed, Mar 09, 2011 at 01:30:39AM -0800, erikmccaskey64 wrote: > >> I use privoxy. In the user.action file i have a redirect rule and a > >> few websites: > >> > >> > >>

Re: what is the “Online Certificate Status Protocol”

2011-03-09 Thread Andres Perera
On Wed, Mar 9, 2011 at 9:27 AM, Joachim Schipper wrote: > On Wed, Mar 09, 2011 at 01:30:39AM -0800, erikmccaskey64 wrote: >> I use privoxy. In the user.action file i have a redirect rule and a few websites: >> >> >> { +redirect{s@http://@https://@} } >> .twitter.com >> .facebook.com >> >> >> Ok! i

Re: what is the “Online Certificate Status Protocol”

2011-03-09 Thread Paul D. Ouderkirk
On Wed, Mar 9, 2011 at 4:30 AM, erikmccaskey64 wrote: > I use privoxy. In the user.action file i have a redirect rule and a few > websites: What version of OpenBSD are you running? -- -- Paul D. Ouderkirk Senior UNIX System Administrator p...@ouderkirk.ca --

Re: what is the “Online Certificate Status Protocol”

2011-03-09 Thread Joachim Schipper
On Wed, Mar 09, 2011 at 01:30:39AM -0800, erikmccaskey64 wrote: > I use privoxy. In the user.action file i have a redirect rule and a few > websites: > > > { +redirect{s@http://@https://@} } > .twitter.com > .facebook.com > > > Ok! it's working great, e.g.: if i visit any "*twitter.com" URL i

Re: what is the “Online Certificate Status Protocol”

2011-03-09 Thread Nigel Taylor
On 03/09/11 09:30, erikmccaskey64 wrote: > I use privoxy. In the user.action file i have a redirect rule and a few > websites: > > > { +redirect{s@http://@https://@} } > .twitter.com > .facebook.com > > > Ok! it's working great, e.g.: if i visit any "*twitter.com" URL it gets > redirected to

what is the “Online Certificate Status Protocol”

2011-03-09 Thread erikmccaskey64
I use privoxy. In the user.action file i have a redirect rule and a few websites: { +redirect{s@http://@https://@} } .twitter.com .facebook.com Ok! it's working great, e.g.: if i visit any "*twitter.com" URL it gets redirected to HTTPS! But: with wireshark i can see some "OCSP" packets [