[Pkg-chromium-maint] Bug#745646: chromium: certificate revocation is not checked

[Vincent Lefevre]

Control: retitle -1 CRLSet (for certificate revocation checking) silently remains outdated

On 2014-04-23 20:07:34 +0200, Vincent Lefevre wrote:
> Certificate revocation is not checked: chromium gives no errors on
> 
>   https://www.cloudflarechallenge.com/
> 
> contrary to Iceweasel. See attached snapshot.

The problem is that the CRLSet silently remains outdated. Here
chrome://components/ says 1572 while the latest version is 1595.

References:
  https://twitter.com/jeekajoo/status/459036397132083200
  https://twitter.com/jeekajoo/status/459039824570499072

Though it seems that the user can check for updates, most users are
probably not aware of this, and for those who know:
  * it can be tedious to check regularly;
  * it is too easy to forget to check.

Iceweasel does up-to-date certificate revocation checking automatically.
This shows that one can do better...

-- 
Vincent Lefèvre <vincent at vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)