Testing certification revocation

Testing  your browser revocation is quite simple.A site with a revoked certificates exists just for this testing. You can use the following URL. Great for testing your  browser security features or a proxy.

https://revoked.grc.com/

Now here's some  screenshos of firefox /  chrome / safari  /opera on a MACOSX 10.10.4 you will be surprised

firefox

chrome

safari

opera

These browsers are going a linux-tinyurl  proxy, which does not  offload , or any cert revocation checks. So whatever the browser does or does not do is passed-thru. A few proxies exist that will conduct crt -revocations checks for non-supported browsers.

Ken Felix
NSE ( Network Security Expert) and Route/Switching Engineer.
kfelix  -----a----t---- socpuppets ---dot---com

    ^     ^
=(  *  * )=
       o 
      /  \