Also, ioerror has posted an update in response to Comodo's disclosure: https://b...

Also, ioerror has posted an update in response to Comodo's disclosure:

Bottom line is certificate revocation lists and OCSP don't mean anything to an attacker like Iran who is MITM'ing the relevant traffic.

yuhong on March 23, 2011 [–]

Yea, did the OCSP designers even thinking about the possiblity of MITMing the OCSP itself?