sigv linux 信号,用kalinux 下面的mitmproxy 工具查看请求的时候会发现请求一个symcd.com...

橘子味的喵

于 2021-05-14 03:08:58 发布

阅读量1k

点赞数

文章标签： sigv linux 信号

使用kalinux上的mitmproxy工具观察Firefox的HTTP请求时，发现请求ss.symcd.com，这涉及到在线证书状态协议(OCSP)用于检查数字证书的吊销状态。symcd.com由Symantec Corporation拥有，用于证书状态的验证，多个子域名指向同一IP地址23.43.139.27。

摘要由CSDN通过智能技术生成

一、用kalinux 下面的mitmproxy 工具查看请求的时候发现一个问题

请求下面会有一个请求ss.symcd.com 这个到底是干什么用的呢？？？

Morning! Hope you are having a great weekend. I’ve been experimenting with some network monitoring of HTTP requests and responses in Mozilla Firefox. While playing around with one of the tools I’m evaluating I noticed a request to gv.symcd.com:

I had not heard of the symcd.com domain before so I got curious. The request is a “application/ocsp-request“. OCSP is a abbreviation for Online Certificate Status Protocol and it is an Internet protocol used for retrieve the revocation status of a digital certificate.

That’s what the symcd.com connection is about: Checking the revocation state for some certificate. The tool I used to track the network traffic does not have