[//]: # (Thank you for reporting an issue to HTTPS Everywhere.) [//]: # (We welcome input from users on improving this project.) [//]: # [//]: # (Please help us by following this issue template.) [//]: # (You can delete all blank lines and all lines starting) [//]: # (with the comment marker, such as this one.) Type: code issue RT, see #19329 . Note that Firefox shows a `Secure Connection Failed` message when visiting https://revoked.badssl.com . It seems fairly feasible to check the CSL and detect revoked certificate used by websites on Travis. https://www.namecheap.com/support/knowledgebase/article.aspx/9968/38/how-to-check-the-certificate-revocation-status The libcurl built-in checking is not very helpful, as it beaks all other checking. > Note that if this option is enabled but the server does not support the TLS extension, the verification will fail. https://curl.haxx.se/libcurl/c/CURLOPT_SSL_VERIFYSTATUS.html [//]: # (Include any other relevant information below. Thank you again for) [//]: # (helping to improve HTTPS Everywhere.)
Type: code issue
RT, see #19329 . Note that Firefox shows a
Secure Connection Failedmessage when visiting https://revoked.badssl.com .It seems fairly feasible to check the CSL and detect revoked certificate used by websites on Travis.
https://www.namecheap.com/support/knowledgebase/article.aspx/9968/38/how-to-check-the-certificate-revocation-status
The libcurl built-in checking is not very helpful, as it beaks all other checking.
https://curl.haxx.se/libcurl/c/CURLOPT_SSL_VERIFYSTATUS.html