CRLSet component to check revoke status of certificates · ungoogled-software/ungoogled-chromium

(23 条评论) (1 个反应) (0 位负责人)Python (771 个派生)batch import

discussionenhancementhelp wanted

仓库指标

星标: (18,674 个星标)
PR 合并指标: (PR 指标待抓取)

描述

Description

CRLSet component to check revoke status of certificates

Who's implementing?

I'm willing to implement this feature myself

The problem

CRLSet is excluded from Ungoogled Chromium, since it contacts Google Servers.

Still this feature is important for security to check the status of website and CA certificates. With the component removed MITM attacks are possible and could happen at all, since the browser never is informed of a certificate revocation.

Possible solutions

Multiple solutions would be possible:

Add the component per default and add a configutation toggle to browser settings to enable/disable (default setting: disable)
Don't add it at all and inform the user how it can be installed by the user (Question: Would it be enough to move the CRLSet component of a Chrome installation to the UserData folder, similar to installing Widevine?)

Alternatives

No response

Additional context