cedws/apple-telemetry

ocsp.godaddy.com

Closed this issue · 5 comments

When blocked, linuxmint.com can't be reached. Generating error with code SEC_ERROR_OCSP_SERVER_ERROR.

Please try using a more current/latest version because ocsp.godaddy.com isn't blocked anymore…

"More current/latest version" of what? I'm running behind AdGuard Home with blacklists updating itself every 24 hours. Request going to ocsp.godaddy.com, blocked by rule ocsp.godaddy.com.akadns.net which results in error above.

Ok, that clarified a lot what the problem is… Will check later after work…

Some background information on OCSP from https://en.wikipedia.org/wiki/Online_Certificate_Status_Protocol

The Online Certificate Status Protocol (OCSP) is an Internet protocol used for obtaining the revocation status of an X.509 digital certificate.[2] It is described in RFC 6960 and is on the Internet standards track. It was created as an alternative to certificate revocation lists (CRL), specifically addressing certain problems associated with using CRLs in a public key infrastructure (PKI).[3] Messages communicated via OCSP are encoded in ASN.1 and are usually communicated over HTTP. The "request/response" nature of these messages leads to OCSP servers being termed OCSP responders.

I agree to remove it from blacklist. PR will come…

@don-dolarson , my PR with your requested change has been merged. So this issue can be closed, can't it?