4 ms·
Sorry if this sounds dumb but this is a non sequitur for me. How does the for-profit web benefit from being able to revoke certificates? And why does revocation
by jsjddbbwj 7y ago
Sorry if this sounds dumb but this is a non sequitur for me. How does the for-profit web benefit from being able to revoke certificates? And why does revocation not work in practice? I thought all major browsers check their own lists to see if certs are revoked
- hoistbypetard 7y agoThis paper: https://cseweb.ucsd.edu/~schulman/docs/imc15-revocation.pdf https://cseweb.ucsd.edu/~schulman/docs/imc15-revocation.pdf is slightly dated but gives a very good rundown of how revocation checks fail in practice along with different attempts to improve them.