Andrew Ayer @__agwa	4. lip 2015.
	Odgovor korisniku/ci @sleevi_ @sleevi_ 1) Apache never validates and 2) I saw conditions in nginx source under which junk could be returned even if validation turned on.
	Prikaz razgovora ·

	Andrew Ayer @__agwa	4. lip 2015.
	Odgovor korisniku/ci @sleevi_ @sleevi_ I'm planning to write blog post about this, and file bugs, but thought this wouldn't be an issue unless/until Must-Staple happened.
	Prikaz razgovora ·

	Andrew Ayer @__agwa	4. lip 2015.
	Odgovor korisniku/ci @sleevi_ @BRIAN_____ @sleevi_ @BRIAN_____ Turns out there's already a 20-month-old bug for nginx. I'll look into submitting a patch. trac.nginx.org/nginx/ticket/4…
	Prikaz razgovora ·

	Andrew Ayer @__agwa	4. lip 2015.
	Odgovor korisniku/ci @sleevi_ @BRIAN_____ @sleevi_ @BRIAN_____ Patch submitted! mailman.nginx.org/pipermail/ngin… (btw, thanks for the kind shoutout earlier :-)
	Prikaz razgovora ·

	Jacob H-A @j4cob	4. lip 2015.
	Odgovor korisniku/ci @sleevi_ @ECCTLS @sleevi_ @ECCTLS Yep, this is a problem with the current design. Considering to block issuance on OCSP readiness- what do you think?
	Prikaz razgovora ·

	Ivan Ristic @ivanristic	5. lip 2015.
	Odgovor korisniku/ci @j4cob @sleevi_ @ECCTLS @j4cob @sleevi_ @ECCTLS Please do. Users shouldn’t get certificates if the entire infrastructure is not ready to handle them.
	Prikaz razgovora ·

	Andrew Ayer @__agwa	4. lip 2015.
	Odgovor korisniku/ci @sleevi_ @SSLMate @sleevi_ @SSLMate Thanks. I did not realize browsers would hard-fail stapled OCSP responses. This is concerning to me because...
	Prikaz razgovora ·

	Quien es mas Groucho @bizzyunderscore	4. lip 2015.
	Odgovor korisniku/ci @SSLMate @sleevi_ @SSLMate @sleevi_ awesome write up! Might want to advise that web server response cache age should be less than max age in the ocsp response
	Prikaz razgovora ·

	Ryan Hurst @rmhrisk	4. lip 2015.
	Odgovor korisniku/ci @sleevi_ @__agwa @BRIAN_____ @sleevi_ @__agwa @BRIAN_____ I have a list!
	Prikaz razgovora ·

	Ryan Hurst @rmhrisk	4. lip 2015.
	Odgovor korisniku/ci @sleevi_ @__agwa @BRIAN_____ @sleevi_ @__agwa @BRIAN_____ yes. There are many ponies I want for these web servers.
	Prikaz razgovora ·