4 ms·

Thanks :) I wonder if this has actually been implemented correctly... Sudden revocation of a TLD will probably result in a sudden hammering of the CA's revoca

Thanks :) I wonder if this has actually been implemented correctly... Sudden revocation of a TLD will probably result in a sudden hammering of the CA's revocation servers too. I imagine an icky failure cascade is happening for some unfortunate user

ikeboy 11y ago
In case you didn't see my edit, this behavior (revoke key pin if cert was revoked) is not in the standards, only proposed. The standards say the opposite.
- daurnimator 11y ago
  In that case; ouch!