Comment by advisedwang

I get that this feels un-pure, but what is the actual damage of validating against cached intermediate certs? The only concrete thing the author cites is harder debugging, but that's a pretty weak objection.