Here is an update with the results of my inquiries about handling of
http redirects when attempting to fetch OCSP responses, Certs or CRLs.

OCSP: we presently use POST requests, not GETs, and we do not support
re-POSTing of requests in response to redirects.

Certs and CRLs: We DO support http redirects to http URLs only, not to
https URLs.
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to