ungoogled-software/ungoogled-chromium

CRLSet component to check revoke status of certificates

Open

#2,719 opened on Feb 16, 2024

View on GitHub
 (23 comments) (1 reaction) (0 assignees)Python (771 forks)batch import
discussionenhancementhelp wanted

Repository metrics

Stars
 (18,674 stars)
PR merge metrics
 (Avg merge 1d 11h) (9 merged PRs in 30d)

Description

Description

CRLSet component to check revoke status of certificates

Who's implementing?

  • I'm willing to implement this feature myself

The problem

CRLSet is excluded from Ungoogled Chromium, since it contacts Google Servers.

Still this feature is important for security to check the status of website and CA certificates. With the component removed MITM attacks are possible and could happen at all, since the browser never is informed of a certificate revocation.

Possible solutions

Multiple solutions would be possible:

  • Add the component per default and add a configutation toggle to browser settings to enable/disable (default setting: disable)
  • Don't add it at all and inform the user how it can be installed by the user (Question: Would it be enough to move the CRLSet component of a Chrome installation to the UserData folder, similar to installing Widevine?)

Alternatives

No response

Additional context

No response

Contributor guide

Research direction
Investigate how CRLSet is integrated in Chromium, understand the current exclusion in Ungoogled Chromium, and explore implementing a toggle to enable/disable CRLSet.
Tech stack
None
Domain
security
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
3-5 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
GitC++Chromium development environment
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
25