Re: wget2 | OCSP: Why is wget checking that thisUpd is not older than 3 days? (#577)

[Ander Juaristi (@juaristi)]

Ander Juaristi commented:


We need to agree on how to check `thisUpdate`. But I think clearly 3 days is 
not enough.

Some ideas:

 - Abort the handshake if response older than 6 months, and let the user 
override this if they want to.
 - Instead of aborting the handshake, print a warning and let it go.
 - Do nothing about this by default, unless the user asks (I guess most won't).

-- 
Reply to this email directly or view it on GitLab: 
https://gitlab.com/gnuwget/wget2/-/issues/577#note_798537253
You're receiving this email because of your account on gitlab.com.