Here is a quote from Steve Gibson in a posting at news.grc.com that some of you may find interesting.
quote:
Gang,
Under the category of "you can never be sure until you test it,
in bringing up a new GRC service for VERIFYING the operation of
web browser certificate revocation handling... I find that many
browsers are apparently not working correctly, either as we
would expect, or at all.
I have much work to do on the page itself, but everything is
online and working. Any browser that *IS* honoring certificate
revocation should REFUSE to display (or clearly warn before
displaying) the one page in THIS special domain:
»revoked.grc.com
IF you CAN see the page, you had better hope that's what you
intend!
Here are my own preliminary findings, which I need to have you
all confirm and further flesh out.
>>>>>> Things in this industry appear to be VERY broken!