From 54b07114e99db8fcea6b9dfa07ab832321f25ddc Mon Sep 17 00:00:00 2001 From: Matthew McPherrin Date: Fri, 10 Apr 2026 15:54:18 -0400 Subject: [PATCH 1/3] Adjust upki wording --- content/en/post/2026-04-10-test-sites.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/post/2026-04-10-test-sites.md b/content/en/post/2026-04-10-test-sites.md index 17d840556..3ff01ae6e 100644 --- a/content/en/post/2026-04-10-test-sites.md +++ b/content/en/post/2026-04-10-test-sites.md @@ -46,7 +46,7 @@ And finally, we need a webserver to host the certificates. We're using Go, which ## Visiting the sites -If you visit one of our revoked sites, you might not get an error message. Revocation checking in browsers varies pretty widely, and has historically not worked great. Today's state-of-the-art is [Firefox's CRLite](https://hacks.mozilla.org/2025/08/crlite-fast-private-and-comprehensive-certificate-revocation-checking-in-firefox/), which is efficient and reliable. Ubuntu is deploying the same technology in their [upki](https://discourse.ubuntu.com/t/an-update-on-upki/77063) project. We hope other browsers and operating systems follow suit. The upki project is a great example of a project [making use of](https://github.com/rustls/upki/tree/main/revoke-test) these revoked test certificates, too. +If you visit one of our revoked sites, you might not get an error message. Revocation checking in browsers varies pretty widely, and has historically not worked great. Today's state-of-the-art is [Firefox's CRLite](https://hacks.mozilla.org/2025/08/crlite-fast-private-and-comprehensive-certificate-revocation-checking-in-firefox/), which is efficient and reliable. Ubuntu is deploying [upki](https://discourse.ubuntu.com/t/an-update-on-upki/77063), a rustls project based on Mozilla's technology. We hope other browsers and operating systems follow suit. The upki project is a great example of a project [making use of](https://github.com/rustls/upki/tree/main/revoke-test) these revoked test certificates, too. The actual content of the website isn't terribly important: We just have a little HTML page explaining what the site is. But since this website is meant for testing clients, there's more than just browsers connecting. In particular, it's pretty routine that I try connecting with `curl` or some other terminal http client, and getting a bunch of HTML spewed to your terminal isn't very nice. From dd9bf3022621eff6e449a8b8dc1c7b5224bf337e Mon Sep 17 00:00:00 2001 From: Matthew McPherrin Date: Fri, 10 Apr 2026 15:59:42 -0400 Subject: [PATCH 2/3] use consistent Rustls capitalization --- content/en/post/2026-04-10-test-sites.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/post/2026-04-10-test-sites.md b/content/en/post/2026-04-10-test-sites.md index 3ff01ae6e..5ad1a9d18 100644 --- a/content/en/post/2026-04-10-test-sites.md +++ b/content/en/post/2026-04-10-test-sites.md @@ -46,7 +46,7 @@ And finally, we need a webserver to host the certificates. We're using Go, which ## Visiting the sites -If you visit one of our revoked sites, you might not get an error message. Revocation checking in browsers varies pretty widely, and has historically not worked great. Today's state-of-the-art is [Firefox's CRLite](https://hacks.mozilla.org/2025/08/crlite-fast-private-and-comprehensive-certificate-revocation-checking-in-firefox/), which is efficient and reliable. Ubuntu is deploying [upki](https://discourse.ubuntu.com/t/an-update-on-upki/77063), a rustls project based on Mozilla's technology. We hope other browsers and operating systems follow suit. The upki project is a great example of a project [making use of](https://github.com/rustls/upki/tree/main/revoke-test) these revoked test certificates, too. +If you visit one of our revoked sites, you might not get an error message. Revocation checking in browsers varies pretty widely, and has historically not worked great. Today's state-of-the-art is [Firefox's CRLite](https://hacks.mozilla.org/2025/08/crlite-fast-private-and-comprehensive-certificate-revocation-checking-in-firefox/), which is efficient and reliable. Ubuntu is deploying [upki](https://discourse.ubuntu.com/t/an-update-on-upki/77063), a Rustls project based on Mozilla's technology. We hope other browsers and operating systems follow suit. The upki project is a great example of a project [making use of](https://github.com/rustls/upki/tree/main/revoke-test) these revoked test certificates, too. The actual content of the website isn't terribly important: We just have a little HTML page explaining what the site is. But since this website is meant for testing clients, there's more than just browsers connecting. In particular, it's pretty routine that I try connecting with `curl` or some other terminal http client, and getting a bunch of HTML spewed to your terminal isn't very nice. From 12651439ab1f37c98c20c6c94ee7e6201380c8bb Mon Sep 17 00:00:00 2001 From: Matthew McPherrin Date: Fri, 10 Apr 2026 16:11:54 -0400 Subject: [PATCH 3/3] Say CRLite explicitly so this sentence ties to the previous one --- content/en/post/2026-04-10-test-sites.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/post/2026-04-10-test-sites.md b/content/en/post/2026-04-10-test-sites.md index 5ad1a9d18..060e831b2 100644 --- a/content/en/post/2026-04-10-test-sites.md +++ b/content/en/post/2026-04-10-test-sites.md @@ -46,7 +46,7 @@ And finally, we need a webserver to host the certificates. We're using Go, which ## Visiting the sites -If you visit one of our revoked sites, you might not get an error message. Revocation checking in browsers varies pretty widely, and has historically not worked great. Today's state-of-the-art is [Firefox's CRLite](https://hacks.mozilla.org/2025/08/crlite-fast-private-and-comprehensive-certificate-revocation-checking-in-firefox/), which is efficient and reliable. Ubuntu is deploying [upki](https://discourse.ubuntu.com/t/an-update-on-upki/77063), a Rustls project based on Mozilla's technology. We hope other browsers and operating systems follow suit. The upki project is a great example of a project [making use of](https://github.com/rustls/upki/tree/main/revoke-test) these revoked test certificates, too. +If you visit one of our revoked sites, you might not get an error message. Revocation checking in browsers varies pretty widely, and has historically not worked great. Today's state-of-the-art is [Firefox's CRLite](https://hacks.mozilla.org/2025/08/crlite-fast-private-and-comprehensive-certificate-revocation-checking-in-firefox/), which is efficient and reliable. Ubuntu is deploying [upki](https://discourse.ubuntu.com/t/an-update-on-upki/77063), a Rustls project based on CRLite. We hope other browsers and operating systems follow suit. The upki project is a great example of a project [making use of](https://github.com/rustls/upki/tree/main/revoke-test) these revoked test certificates, too. The actual content of the website isn't terribly important: We just have a little HTML page explaining what the site is. But since this website is meant for testing clients, there's more than just browsers connecting. In particular, it's pretty routine that I try connecting with `curl` or some other terminal http client, and getting a bunch of HTML spewed to your terminal isn't very nice.