New issue
Advanced search Search tips

Issue 738216 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Jul 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: Bug
Team-Security-UX



Sign in to add a comment

Revoked cert interstitial says "try again later".

Project Member Reported by lgar...@chromium.org, Jun 29 2017

Issue description

Chrome 61.0.3141.7
macOS 10.12.5

What steps will reproduce the problem?
(1) Visit https://expired.badssl.com/
(2) Click on "Advanced"

What is the expected result?
Advice relevant to revocation.

What happens instead?
"You cannot visit revoked.badssl.com right now because its certificate has been revoked. Network errors and attacks are usually temporary, so this page will probably work later."

My guess is that a revoked certificate is rarely due to a network error. "This page will probably work later" sounds incorrect except in the rare case of an emergency revocation that reaches the user (via CRLSet or enterprise setting) before the site has had a chance to update.
 

Comment 1 by est...@chromium.org, Jul 31 2017

Status: WontFix (was: Untriaged)
I'm not sure... for any problem with the site's certificate, I'd expect the site owner to replace the certificate fairly quickly. I think "network error" here is meant colloquially to communicate "misconfiguration" rather than a literal network error.

I'm going to WontFix this for now but we can keep discussing if you feel strongly.
> I'd expect the site owner to replace the certificate fairly quickly

Maybe it's just my experience with the preload list, but that doesn't sound like a reliable assumption to me.

But I'm okay with dropping this issues, given that this string is seen very rarely anyhow.

Sign in to add a comment