Am I correct in assuming that Firefox on iOS is not actually using the Mozilla OneCRL mechanism to distribute certificate revocations and seemingly is just piggybacking on Apple/WebKit's infrastructure? I'm on latest FF v158.1, but still able to connect to sites with the compromised SSL certificates...
https://emudhra.we-have-a-problem.com/
Does that mean I'll have to update to iOS 27 now or wait for some other Apple security update? Arrgghhh... 🫣
#Firefox #iOS #eMudhra #SSL #WeHaveAProblem #InfoSec
Karsten Schmidt
npub1lf…s5lyy
2026-10-21 09:16:34 UTC
Author Public Key
npub1lfn827aqxvg9gxel64vxnpjkkundr0khkeh568asjp6qft8csd0ses5lyySeen on
wss://relay.momostr.pinkPublished at
2026-10-21 09:16:34 UTCEvent JSON
{
"id": "b35fae9021e87866285a4794245f8b4b7b200a8fa4ef6b91fa0f4c7e67b8a7dd",
"pubkey": "fa66757ba03310541b3fd558698656b726d1bed7b66f4d1fb0907404acf8835f",
"created_at": 1792574194,
"kind": 1,
"tags": [
[
"t",
"firefox"
],
[
"t",
"infosec"
],
[
"t",
"ios"
],
[
"t",
"wehaveaproblem"
],
[
"proxy",
"https://mastodon.thi.ng/@toxi/117478142436740262",
"web"
],
[
"t",
"emudhra"
],
[
"t",
"ssl"
],
[
"proxy",
"https://mastodon.thi.ng/users/toxi/statuses/117478142436740262",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mastodon.thi.ng/users/toxi/statuses/117478142436740262",
"pink.momostr"
],
[
"-"
]
],
"content": "Am I correct in assuming that Firefox on iOS is not actually using the Mozilla OneCRL mechanism to distribute certificate revocations and seemingly is just piggybacking on Apple/WebKit's infrastructure? I'm on latest FF v158.1, but still able to connect to sites with the compromised SSL certificates...\n\nhttps://emudhra.we-have-a-problem.com/\n\nDoes that mean I'll have to update to iOS 27 now or wait for some other Apple security update? Arrgghhh... 🫣\n\n#Firefox #iOS #eMudhra #SSL #WeHaveAProblem #InfoSec",
"sig": "b174bb98d9f525f0c5e110a1440574904d4b575f79393adf3d164b13019985a0b18ae557a72060d088101194e61b1532397b93e87527291ec6a3e04235583e48"
}