Hacker News new | ask | show | jobs
by brewmarche 974 days ago
Oof, I’ve complained about practical problems in my developer life above, but that’s even worse than I thought. I was able to reproduce dh1024 and no-sct on my work laptop with zScaler. Interestingly it blocks the revoked one by turning it into a self-signed one.

Also failing:

- pinning-test

- all dh*, except for dh480 and dh512

1 comments

> Interestingly it blocks the revoked one by turning it into a self-signed one.

Well spotted! That's crazy...