Google`s CRLset Cert Revocation Gibbson Research Article

For everything that's not in any way related to PureBasic. General chat etc...
User avatar
Zebuddi123
Enthusiast
Enthusiast
Posts: 794
Joined: Wed Feb 01, 2012 3:30 pm
Location: Nottinghamshire UK
Contact:

Google`s CRLset Cert Revocation Gibbson Research Article

Post by Zebuddi123 »

Hi to All. Found some files in my temp dir, as per usual oooo whats this not noticed this before. Basically Chrome`s CRLset (had installed Chrome earlier) as I found out after a little research. Then I came across this site and aritcle, about
https://revoked.grc.com dont try it it been revoked by Google, from the looks of it Googles CRLset only contains about 1.5% of most of the revoked certs floating around. Anyway`s read the aritcle if it interests you. By the way Thought I install Firefox and see if i can get to the revoked.grc.com site and low and behold my anti-virus stops me saying this site had its cert revoked lol :) I have always thought Gibbson Research as/is one of the good guy`d lol. ?

Article: https://www.grc.com/revocation/crlsets.htm
malleo, caput, bang. Ego, comprehendunt in tempore
juror
Enthusiast
Enthusiast
Posts: 228
Joined: Mon Jul 09, 2007 4:47 pm
Location: Courthouse

Re: Google`s CRLset Cert Revocation Gibbson Research Articl

Post by juror »

And this has to do with PureBasic how?
User avatar
Zebuddi123
Enthusiast
Enthusiast
Posts: 794
Joined: Wed Feb 01, 2012 3:30 pm
Location: Nottinghamshire UK
Contact:

Re: Google`s CRLset Cert Revocation Gibbson Research Articl

Post by Zebuddi123 »

My Apologies should have been placed in "off topic" Can a mod please place in "Off topic" Thanks.

Zebuddi.
malleo, caput, bang. Ego, comprehendunt in tempore
User avatar
tj1010
Enthusiast
Enthusiast
Posts: 623
Joined: Mon Feb 25, 2013 5:51 pm
Location: US or Estonia
Contact:

Re: Google`s CRLset Cert Revocation Gibbson Research Articl

Post by tj1010 »

That's a sub-domain cert. His main cert is a DigiCert with AES_256_CBC which is obsolete..
Found:
static_sts_domain: grc.com
static_upgrade_mode: STRICT
static_sts_include_subdomains: false
static_sts_observed: 1490677200
static_pkp_domain:
static_pkp_include_subdomains:
static_pkp_observed:
static_spki_hashes:
dynamic_sts_domain:
dynamic_upgrade_mode: UNKNOWN
dynamic_sts_include_subdomains:
dynamic_sts_observed:
dynamic_pkp_domain:
dynamic_pkp_include_subdomains:
dynamic_pkp_observed:
dynamic_spki_hashes:
That basically means no MITM after cert pin..

I've been using SpinRite for years. On a podcast once he mentioned an upgrade that used more SMART data to better predict and repair but never did it.
The truth hurts.
Post Reply