> simply stop working How would this happen? Are you suggesting that network failures are something that shouldn't impact even advanced users who've opted them

> simply stop working How would this happen? Are you suggesting that network failures are something that shouldn't impact even advanced users who've opted themselves in to the potential pitfalls in order to gain security? I'm not suggesting hard-fail be the default, I'm suggesting CRLs be the default with hard-fail as an option for advanced users who know how to resolve problems when they do occur.