November 2012
- How Facebook can avoid losing $100M in revenue when they switch to always-on SSL
Recently Facebook announced that they will be moving to Always-On-SSL, I for one am thrilled to see this happen – especially given how much personal data can be gleamed from observing a Facebook session.
- Making a Windows smartcard login certificate with OpenSSL.
I use OpenSSL for testing certificate related stuff all the time, while using its test clients as a administrative tool can require contortions sometimes it’s very useful thing to have in my toolbox.
- Using CAPICOM on Windows x64
So CAPICOM was one of the project I was responsible for while at Microsoft, its been discontinued but I always find it useful – it is kind of a Swiss Army knife for CryptoAPI certificate stores when paired with its VBS…
- Priming the OCSP cache in Nginx
So recently GlobalSign, DigiCert, and Comodo worked together with Nginx to get OCSP stapling supoported in Nginx 1.3.7, unfortunately architectural restrictions made it impractical to make it so that pre-fetching the…
- What is the status of revocation checking in browsers?
Today we did an announcement of some work we have been doing with CloudFlare to speed up SSL for all of our customers through some improvements to our revocation infrastructure.
- Revocation checking, Chrome and CRLsets
One of the things I often hear is that Chrome no longer does revocation checking, this isn't actually true.