Privacy policy

OCSP Evaluator does not collect, send or sell any data, and it has no analytics. There is no server of mine.

• Certificates are checked by your browser. To ask “is this certificate revoked?”, the add-on contacts only the OCSP responder or the CRL address written inside the certificate, which belong to the authority that issued it (the same ones Firefox may contact). An OCSP request contains the certificate's serial number and identifies its issuer, not the page you are on.
• When you check a site on demand or add it to the monitor, the add-on connects to that site to read its certificate.
• Local and private addresses are skipped by default, and you can list domains that are never checked.
• Stored in the add-on's local storage, and removed when you uninstall it: your settings, the monitored domains, the history of checks (it can be turned off or cleared) and a short cache of results.

The links in the panel (“Source code”, “Buy me a coffee”) are ordinary links that you choose to open.

Contact: Francesco De Stefano, through the SourceForge project.