Today the best behaving client for revocation behavior is that of Windows, in the case of browsers that means IE and Chrome. With that said it has a very fundamental problem, if it reaches a CA’s OCSP responder and it provides an authoritative “that’s not mine” (aka Unknown) clients built on this platform treat the … Continue reading Browser Revocation Behavior Needs Improvement