Post #2160116

2026-04-12 00:15 UTC

Anyone on #GrapheneOS who could tell me if they see a revoked TLS certificate on this page in either Vanadium or Firefox? On desktop it shows revoked, other Android user confirmed it shows revoked as well but on my GrapheneOS device the link is just working in both browsers, with and without private/incognito mode. Update: Two people confirmed no error, one on lobste.rs https://lobste.rs/s/k11wgv/difficulty_making_sure_your_website_is#c_ijjecc gets an error on different Android OS. https://revoked.yr.test-certs.letsencrypt.org/

Replies (6)

@markisherwood@kind.social 2026-04-12 00:22

@pl@mastodon.social I just tried on both Fennec and Vanadium with GrapheneOS and no cert errors for me.

Open ##2603604
@Torx@social.tchncs.de 2026-04-12 00:37

@pl@mastodon.social Neither IronFox nor Vanadium show a revoked certificate. They simply show the page and claim the connection is secure.

Open ##2603611
@projectgus@aus.social 2026-04-12 00:41

@pl@mastodon.social I get this in Firefox Focus (149.0.2) installed from the Play Store on GrapheneOS. Weirdly the "Advanced..." specifics don't give the right reason, but the warning is here. Vanadium loads the page without any warning, same as others have reported. If it's useful then I can install the latest Firefox for Android from Play Store and see what it does as well.

Open ##2603612
@networkexception@chaos.social 2026-04-12 00:53

@pl@mastodon.social might be intended https://chromium.googlesource.com/chromium/src/+/HEAD/docs/security/faq.md#what_s-the-story-with-certificate-revocation

Open ##2603613
@dark_stang@kind.social 2026-04-12 03:47

@pl@mastodon.socia l I get a cert error on fennec on graphene. The cert revocation list is distributed through remote settings (at least in desktop, I'm pretty sure in fenix too but I'd have to look). So as long as that isn't disabled, or the domain blocked, you should be getting updates for it. Domain is firefox.settings.services.mozilla.com if you wanna check DNS or other blocks you have.

Open ##2603616
@ar@is-a.cat 2026-04-12 06:38

@pl@mastodon.social revoked in Firefox; loads iin vandaium; incognito behaves the same way

Open ##2603617