July 2012
- Government CAs in the Microsoft Root Program
Microsoft was the first Root program in a browser to have an open and transparent process for becoming a CA as well as the first to have public policy, audit and technical requirements that CAs must comply with.
- Serving OCSP POST responses on a CDN
The other day I did a blog post on how we are using a CDN to front our OCSP services, the CDN we are using is CloudFlare who is one of our partners.
- Wanted: Senior Software Engineer (Back-End) [Manila]
Title: Senior Software Engineer / Lead
- Wanted: Senior Software Engineer / Lead [Manila]
Title: Senior Software Engineer / Lead
- Wanted: IT Analyst [Tokyo]
Title: IT Analyst
- Wanted: Information Technology Manager [Tokyo]
Title: Information Technology Manager
- Wanted: Network and System Specialist [Singapore]
Title: Network and System Specialist
- Wanted: Software Engineer [Seattle/Manila]
Title: Software Engineer
- Wanted: Senior Software Engineer (Front-End) [Seattle]
Title: Senior Software Engineer (Front-End)
- How to seed the CryptoAPI URL cache with an OCSP response
It is possible to “staple” an OCSP response into higher level protocols such as TLS. This concept has been supported in Windows since Windows VISTA, shortly after it was added to OpenSSL/Apache and soon it will also be…
- CryptoAPI, Revocation checking, OCSP and the Unknown certStatus
In CryptoAPI one can use the CertGetCertificateChain.aspx) API to do the path building and basic chain validation, this validation may include revocation checking depending on which flags you pass via dwFlags; for…