zlacker

>>virapt+(OP)
A lot of detail, not a lot of reasoning. What seems to matter are things like ODSCP (or whatever the ssl check is called), so use Opera, and phishing, so common sense.

>>tobyla+Z4
For more explanations check: http://qubes-os.org/FAQ.html and the architecture document. Reasoning is there.

Regarding OCSP (Online Certificate Status Protocol) - have a look at http://en.wikipedia.org/wiki/Moxie_Marlinspike#OCSP_Attacks