derflounder.wordpress.com
Setting OCSP and CRL certificate settings in Keychain Access
To help secure Safari against certificate hijacking, you can set your OCSP and CRL settings in Keychain Access, so that Safari can correctly identify certificates as being revoked and therefore unt…