Re: Port 80 deprecation

On 2021-06-07 12:38 a.m., Adrien de Croy wrote:
>
> I'm waiting for someone to propose https for accessLocation for OCSP
>
> Then we will have a nice little Gordian knot.
>
> CRL checks also have to use http.
>

Strictly speaking, they do not. You can, in fact, just skip those checks
when checking the certificates of those services. It's more accurate to
say OCSP is incompatible with OCSP, than to say HTTPS is incompatible
with OCSP.

Received on Monday, 7 June 2021 11:30:36 UTC