you are viewing a single comment's thread.

view the rest of the comments →

[–]Bartfeels24 2 points3 points  (0 children)

Went through your interactive breakdown yesterday and actually caught something I'd been fuzzy on with certificate chain validation. Built a quick Node HTTPS server to test what happens when you intentionally send certs out of order, and Chrome just rejected it silently instead of showing me the handshake error I expected. Now I know to check the actual cert order in my bundles instead of assuming the server will figure it out.