Skip to content

Adjust upki wording #2190

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mcpherrinm merged 3 commits into from
Apr 10, 2026
Merged

Adjust upki wording #2190

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
54b0711
Adjust upki wording
mcpherrinm Apr 10, 2026
dd9bf30
use consistent Rustls capitalization
mcpherrinm Apr 10, 2026
1265143
Say CRLite explicitly so this sentence ties to the previous one
mcpherrinm Apr 10, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion content/en/post/2026-04-10-test-sites.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ And finally, we need a webserver to host the certificates. We're using Go, which

## Visiting the sites

If you visit one of our revoked sites, you might not get an error message. Revocation checking in browsers varies pretty widely, and has historically not worked great. Today's state-of-the-art is [Firefox's CRLite](https://hacks.mozilla.org/2025/08/crlite-fast-private-and-comprehensive-certificate-revocation-checking-in-firefox/), which is efficient and reliable. Ubuntu is deploying the same technology in their [upki](https://discourse.ubuntu.com/t/an-update-on-upki/77063) project. We hope other browsers and operating systems follow suit. The upki project is a great example of a project [making use of](https://github.com/rustls/upki/tree/main/revoke-test) these revoked test certificates, too.
If you visit one of our revoked sites, you might not get an error message. Revocation checking in browsers varies pretty widely, and has historically not worked great. Today's state-of-the-art is [Firefox's CRLite](https://hacks.mozilla.org/2025/08/crlite-fast-private-and-comprehensive-certificate-revocation-checking-in-firefox/), which is efficient and reliable. Ubuntu is deploying [upki](https://discourse.ubuntu.com/t/an-update-on-upki/77063), a Rustls project based on CRLite. We hope other browsers and operating systems follow suit. The upki project is a great example of a project [making use of](https://github.com/rustls/upki/tree/main/revoke-test) these revoked test certificates, too.

The actual content of the website isn't terribly important: We just have a little HTML page explaining what the site is. But since this website is meant for testing clients, there's more than just browsers connecting. In particular, it's pretty routine that I try connecting with `curl` or some other terminal http client, and getting a bunch of HTML spewed to your terminal isn't very nice.

Expand Down
Loading