4 ms·
> There’s still a long way to go before revocation in the Web PKI is truly fixed. It won't be fixed until we have name constraints on CA certificates, and a wa
by cryptonector 4y ago
> There’s still a long way to go before revocation in the Web PKI is truly fixed.
It won't be fixed until we have name constraints on CA certificates, and a way to decorate trust anchors with local policy name constraints.