I have been asked a few times recently what my largest issues are with Firefox and it’s PKI/TLS implementations, here is the short-list: 725351 – Support enforcing nested EKU constraints, do so by default. 579606 – Multiple OCSP requests should be performed in parallel 565047 – Implement TLS 1.1 (RFC 4346) 436414 – OCSP client … Continue reading My top PKI/TLS related issues in Firefox