The difficulty of making sure your website is broken

41 points - today at 4:45 PM

Source

Comments

nottorp today at 7:33 PM
In the same direction, I once wanted to test an embedded device on crap wifi.

So I just ordered the cheapest AP I could find.

Except the damn device worked perfectly. Slow but rock solid.

One of our testers at $CURRENT_JOB also has trouble simulating a crap network, because our network is good.

paulirish today at 5:11 PM
https://badssl.com/ also offers several test subdomains in the same vein.
ipython today at 5:57 PM
Interesting. Chrome (146, macOS) shows no error messages on the revoked cert pages, but Firefox does (also macOS).
lifis today at 6:15 PM
Vanadium, Chrome and Firefox (all for Android) all accept all the revoked certificates... But revoked.badssl.com is considered revoked
bullen today at 5:27 PM
Meanwhile HTTP keeps working just fine and is decentralized.

Just "add your own crypto" on top, which is the ONLY thing a sane person would do.

3... 2... 1... banned?