From b0ec7cffde648959914b2753a2aadc65b693906d Mon Sep 17 00:00:00 2001 From: Aminda Suomalainen Date: Fri, 26 Apr 2024 11:27:11 +0300 Subject: [PATCH] chromium/README: EnableOnlineRevocationChecks does also enable CRL --- etc/opt/chromium/policies/managed/README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/etc/opt/chromium/policies/managed/README.md b/etc/opt/chromium/policies/managed/README.md index 2223867f..882b9aff 100644 --- a/etc/opt/chromium/policies/managed/README.md +++ b/etc/opt/chromium/policies/managed/README.md @@ -297,7 +297,8 @@ their alternative port. ## `enable-ech-ocsp.json` -Enables encrypted client hello (ECH) and Online Certificate Status Protocol (OCSP) (or Certificate Revocation List (CRL)?) checks. +Enables encrypted client hello (ECH) and Online Certificate Status Protocol +(OCSP)/Certificate Revocation List (CRL) checks. However ECH requires `"DnsOverHttpsMode": "secure"` which will break things (and thus my files don't enable it),