Chromium support for OCSP Must Staple via TLS-Feature extension in TLS Certificates

[Anthony Voutas]

Hi there. I'm wondering if Chromium has any plans to support the OCSP Must Staple feature.

I had a look around and I couldn't find any mention of it in the Chrome or Chromium blogs or online in general. I did find this issue (https://code.google.com/p/chromium/issues/detail?id=572734) but there aren't any comments on it.

From a CA perspective Let's Encrypt is currently in the process of adding support:

https://github.com/letsencrypt/boulder/pull/1224

From a client perspective Firefox is adding it in for Firefox 45:

https://blog.mozilla.org/security/2015/11/23/improving-revocation-ocsp-must-staple-and-short-lived-certificates/

[Jan Enveetee]

Op dinsdag 19 januari 2016 04:08:37 UTC+1 schreef Anthony Voutas:

And no posts in this thread too..

Looks like Google doesn't care? Even though Adam Langley said OCSP Must Staple is a solution in 2014: https://www.imperialviolet.org/2014/04/19/revchecking.html

Firefox 45 is already in beta! You're lagging behind Google :)Adam Langley'sAdam Langley'sAdA

[PhistucK]

security-dev might have more replies to this discussion.

☆PhistucK

--
--
Chromium Discussion mailing list: chromium...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-discuss

---
You received this message because you are subscribed to the Google Groups "Chromium-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-discu...@chromium.org.

[Alban Koxha]

Alban Koxha

[MSI Team]

There's a security-dev discussion for this: https://groups.google.com/a/chromium.org/forum/#!topic/security-dev/-pB8IFNu5tw