what is the “Online Certificate Status Protocol”

2011-03-09 Thread erikmccaskey64
I use privoxy. In the user.action file i have a redirect rule and a few websites: { +redirect{s@http://@https://@} } .twitter.com .facebook.com Ok! it's working great, e.g.: if i visit any *twitter.com URL it gets redirected to HTTPS! But: with wireshark i can see some OCSP packets [

Re: what is the “Online Certificate Status Protocol”

2011-03-09 Thread Nigel Taylor
On 03/09/11 09:30, erikmccaskey64 wrote: I use privoxy. In the user.action file i have a redirect rule and a few websites: { +redirect{s@http://@https://@} } .twitter.com .facebook.com Ok! it's working great, e.g.: if i visit any *twitter.com URL it gets redirected to HTTPS!

Re: what is the “Online Certificate Status Protocol”

2011-03-09 Thread Joachim Schipper
On Wed, Mar 09, 2011 at 01:30:39AM -0800, erikmccaskey64 wrote: I use privoxy. In the user.action file i have a redirect rule and a few websites: { +redirect{s@http://@https://@} } .twitter.com .facebook.com Ok! it's working great, e.g.: if i visit any *twitter.com URL it gets

Re: what is the “Online Certificate Status Protocol”

2011-03-09 Thread Paul D. Ouderkirk
On Wed, Mar 9, 2011 at 4:30 AM, erikmccaskey64 erikmccaske...@zoho.com wrote: I use privoxy. In the user.action file i have a redirect rule and a few websites: What version of OpenBSD are you running? -- -- Paul D. Ouderkirk Senior UNIX System Administrator

Re: what is the “Online Certificate Status Protocol”

2011-03-09 Thread Andres Perera
On Wed, Mar 9, 2011 at 9:27 AM, Joachim Schipper joac...@joachimschipper.nl wrote: On Wed, Mar 09, 2011 at 01:30:39AM -0800, erikmccaskey64 wrote: I use privoxy. In the user.action file i have a redirect rule and a few websites: { +redirect{s@http://@https://@} } .twitter.com .facebook.com

Re: what is the “Online Certificate Status Protocol”

2011-03-09 Thread Joachim Schipper
On Wed, Mar 09, 2011 at 03:03:22PM -0430, Andres Perera wrote: On Wed, Mar 9, 2011 at 9:27 AM, Joachim Schipper joac...@joachimschipper.nl wrote: On Wed, Mar 09, 2011 at 01:30:39AM -0800, erikmccaskey64 wrote: I use privoxy. In the user.action file i have a redirect rule and a few

Re: what is the “Online Certificate Status Protocol”

2011-03-09 Thread Bayard Bell
The simple answer as to why OCSP isn't itself via HTTPS is that this would be a cyclical dependency: if you need to accept a certificate, you need to confirm its continuing validity. If you have to use a connection relying on that same logic to confirm validity, at what point are you then able to