Re: [Bug-gnuzilla] Icecat SSL warning/error pages; what settings affect the production of these 'error' pages?

[jc_gargma]

> 1)  Sites that work well on a fast connection suddenly start to give me this
> error when I'm on a poor connection - seems like a time-out of some sort. 
> It gets worse if I try to load several such sites at once.
> 
> 2)  If I toggle "Query OCSP responder servers to confirm validity of
> certificates" in Preferences -> Advanced -> Certificates  off and then back
> on quickly (meaning, the box starts out checked, I uncheck it and then
> re-check it before doing anything else), then "Try Again" or a refresh
> brings up the site without any issues.
> 
> 3)  I am totally unable to reproduce this error in Iceweasel or any other
> Mozilla-based browsers, even while on a poor connection, so it's an
> Icecat-specific phenomenon.
This sounds like a combination of lost packets due to weak signal and IceCat 
having
security.OCSP.require
set to true by default.
This setting causes sites that fail to return an OCSP request to be considered 
unsafe.
IceWeasel and Firefox have this set to false by default, which likely accounts 
for their not reproducing this error.


-jc

signature.asc
Description: This is a digitally signed message part.