Hacker News Reader

Outdated. Lots of those sites are serving from the G1 root now, which has not been revoked or compromised yet

not outdated, many of these are still serving revoked certificates and I can't load any of them on firefox or a patched curl

That's a quirk of Firefox. Many (most?) browsers don't check revocations so you can keep using the revoked certs indefinitely. There was a great talk last month at AUSNOG on revocation where he details how much effort he put into getting a revoked cert recognized as no longer valid, without success, https://www.youtube.com/watch?v=YsH63Pr1jrw

Reply on news.ycombinator.com