3 ms·

The problem with certificate revocation is that a lot of software treats it as a soft-fail if revocation status can't be verified, rather than a hard fail. Tha

by wolrah 6y ago

The problem with certificate revocation is that a lot of software treats it as a soft-fail if revocation status can't be verified, rather than a hard fail. That is one of the main reasons for LE's short lifespan. Certificate revocation is not reliable in practice.