{"action":"created","issue":{"url":"https://api.github.com/repos/rockdaboot/wget2/issues/75","repository_url":"https://api.github.com/repos/rockdaboot/wget2","labels_url":"https://api.github.com/repos/rockdaboot/wget2/issues/75/labels{/name}","comments_url":"https://api.github.com/repos/rockdaboot/wget2/issues/75/comments","events_url":"https://api.github.com/repos/rockdaboot/wget2/issues/75/events","html_url":"https://github.com/rockdaboot/wget2/issues/75","id":155933487,"number":75,"title":"Add OCSP \"Must-Staple\"","user":{"login":"rockdaboot","id":2087964,"avatar_url":"https://avatars.githubusercontent.com/u/2087964?v=3","gravatar_id":"","url":"https://api.github.com/users/rockdaboot","html_url":"https://github.com/rockdaboot","followers_url":"https://api.github.com/users/rockdaboot/followers","following_url":"https://api.github.com/users/rockdaboot/following{/other_user}","gists_url":"https://api.github.com/users/rockdaboot/gists{/gist_id}","starred_url":"https://api.github.com/users/rockdaboot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rockdaboot/subscriptions","organizations_url":"https://api.github.com/users/rockdaboot/orgs","repos_url":"https://api.github.com/users/rockdaboot/repos","events_url":"https://api.github.com/users/rockdaboot/events{/privacy}","received_events_url":"https://api.github.com/users/rockdaboot/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-05-20T10:29:36Z","updated_at":"2016-10-27T08:05:53Z","closed_at":null,"body":"https://www.grc.com/revocation/ocsp-must-staple.htm\r\nhttps://tools.ietf.org/html/rfc7633\r\n\r\n1. If stated by the new cert extension, the server *must* send a stapled OCSP record. If the server doesn't -> hard-fail.\r\n\r\n2. New HTTP response header \"Must-Staple:\", similar to HSTS. On first contact put the domain + expire into a database. On successive contacts we *must* expect a stapled OCSP record, else hard-fail (or contact OCSP responder and than hard-fail on error).\r\n"},"comment":{"url":"https://api.github.com/repos/rockdaboot/wget2/issues/comments/256574937","html_url":"https://github.com/rockdaboot/wget2/issues/75#issuecomment-256574937","issue_url":"https://api.github.com/repos/rockdaboot/wget2/issues/75","id":256574937,"user":{"login":"juaristi","id":12197371,"avatar_url":"https://avatars.githubusercontent.com/u/12197371?v=3","gravatar_id":"","url":"https://api.github.com/users/juaristi","html_url":"https://github.com/juaristi","followers_url":"https://api.github.com/users/juaristi/followers","following_url":"https://api.github.com/users/juaristi/following{/other_user}","gists_url":"https://api.github.com/users/juaristi/gists{/gist_id}","starred_url":"https://api.github.com/users/juaristi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/juaristi/subscriptions","organizations_url":"https://api.github.com/users/juaristi/orgs","repos_url":"https://api.github.com/users/juaristi/repos","events_url":"https://api.github.com/users/juaristi/events{/privacy}","received_events_url":"https://api.github.com/users/juaristi/received_events","type":"User","site_admin":false},"created_at":"2016-10-27T08:05:53Z","updated_at":"2016-10-27T08:05:53Z","body":"FYI the current Wireshark stable cannot dissect the TLS extension either."}}
{"actor":{"display_login":"juaristi"}}