Page 1 of 1

Google`s CRLset Cert Revocation Gibbson Research Article

Posted: Wed Apr 12, 2017 3:45 pm
by Zebuddi123
Hi to All. Found some files in my temp dir, as per usual oooo whats this not noticed this before. Basically Chrome`s CRLset (had installed Chrome earlier) as I found out after a little research. Then I came across this site and aritcle, about
https://revoked.grc.com dont try it it been revoked by Google, from the looks of it Googles CRLset only contains about 1.5% of most of the revoked certs floating around. Anyway`s read the aritcle if it interests you. By the way Thought I install Firefox and see if i can get to the revoked.grc.com site and low and behold my anti-virus stops me saying this site had its cert revoked lol :) I have always thought Gibbson Research as/is one of the good guy`d lol. ?

Article: https://www.grc.com/revocation/crlsets.htm

Re: Google`s CRLset Cert Revocation Gibbson Research Articl

Posted: Thu Apr 13, 2017 1:04 am
by juror
And this has to do with PureBasic how?

Re: Google`s CRLset Cert Revocation Gibbson Research Articl

Posted: Thu Apr 13, 2017 8:36 am
by Zebuddi123
My Apologies should have been placed in "off topic" Can a mod please place in "Off topic" Thanks.

Zebuddi.

Re: Google`s CRLset Cert Revocation Gibbson Research Articl

Posted: Fri Apr 14, 2017 2:58 pm
by tj1010
That's a sub-domain cert. His main cert is a DigiCert with AES_256_CBC which is obsolete..
Found:
static_sts_domain: grc.com
static_upgrade_mode: STRICT
static_sts_include_subdomains: false
static_sts_observed: 1490677200
static_pkp_domain:
static_pkp_include_subdomains:
static_pkp_observed:
static_spki_hashes:
dynamic_sts_domain:
dynamic_upgrade_mode: UNKNOWN
dynamic_sts_include_subdomains:
dynamic_sts_observed:
dynamic_pkp_domain:
dynamic_pkp_include_subdomains:
dynamic_pkp_observed:
dynamic_spki_hashes:
That basically means no MITM after cert pin..

I've been using SpinRite for years. On a podcast once he mentioned an upgrade that used more SMART data to better predict and repair but never did it.