Re: Want to learn TLS certificate verification best practices

2016-10-04 Thread Ben Cottrell
Hi Gervase, On Mon, Oct 03, 2016 at 09:49:20AM +0100, Gervase Markham wrote: > This question might be better off in mozilla.dev.tech.crypto. OK, understood. Thanks for the redirect. Although, you've given me enough to chew on already that I'm not likely to immediately go post over there, either.

Re: Want to learn TLS certificate verification best practices

2016-10-03 Thread Gervase Markham
Hi Ben, This question might be better off in mozilla.dev.tech.crypto. On 30/09/16 23:00, Ben Cottrell wrote: > I'm working on an (unfortunately closed-source) project that needs > to closely approximate the behavior of an actual web browser, in > the limited scope of making HTTPS connections and

Want to learn TLS certificate verification best practices

2016-09-30 Thread Ben Cottrell
Hi all, I'm working on an (unfortunately closed-source) project that needs to closely approximate the behavior of an actual web browser, in the limited scope of making HTTPS connections and accurately warning about certificate problems. So I need to learn about "what real browsers do" and it seems