And certificate revocation lists (CRLs) are potentially more brittle in my experience, too. It’s pretty easy to audit a server for a key in a file or a key fil

And certificate revocation lists (CRLs) are potentially more brittle in my experience, too. It’s pretty easy to audit a server for a key in a file or a key file on disk.