chromium / badssl.com

:lock: Memorable site for testing clients against bad SSL configs.
https://badssl.com
Apache License 2.0
2.81k stars 190 forks source link

Signed HTTP Exchange #400

Open Madis0 opened 5 years ago

Madis0 commented 5 years ago

I think it would be worth it to add two pages supporting Signed HTTP Exchange - one for the real page and one that caches it, that would make it easy to observe the behavior and browser support of the protocol.

christhompson commented 4 years ago

It looks like we may be able to get these through DigiCert, but it will require some fiddling with our configs: https://docs.digicert.com/manage-certificates/certificate-profile-options/get-your-signed-http-exchange-certificate/

No specific plans for when we'll get to this though.