3 ms·
Where does it say that? The link says they centrally manage revocations using OneCRL and then push a single revocation list to browsers (independent of browser
by marcinzm 8y ago
Where does it say that? The link says they centrally manage revocations using OneCRL and then push a single revocation list to browsers (independent of browser updates). Which means they can revoke any certificate they want using that mechanism.
- crehn 8y agoAh, you're correct. Seems they skip CA CRL/OCSP in favor of their own CRL. Thanks for the correction.