Comment on HN is in the same cluster as 2ch, not Techcrunch, on TwitterparentComments−kazazes10yWouldn't it be more reasonable for browsers to not cache them at all and universally reject missing intermediate certificates? (IIRC correctly, Chrome doesn't mind but Firefox will give you the train conductor)−schoen10yIt would definitely eventually reduce the frequency of this configuration mistake.Firefox definitely does cache intermediates (I've seen it do so as recently as today).
Comments
Wouldn't it be more reasonable for browsers to not cache them at all and universally reject missing intermediate certificates? (IIRC correctly, Chrome doesn't mind but Firefox will give you the train conductor)
It would definitely eventually reduce the frequency of this configuration mistake.
Firefox definitely does cache intermediates (I've seen it do so as recently as today).