In the CRLite paper [1] the bandwidth cost was estimated to be ~600 KB per day. Most crucially they do not directly store certificates but only boolean flags fo

In the CRLite paper [1] the bandwidth cost was estimated to be ~600 KB per day. Most crucially they do not directly store certificates but only boolean flags for hashes of virtually all once-valid certificates in existence. This is made possible because of Certificate Transparency; once the signature has been verified there can be only so many hashes to check. [1] https://obj.umiacs.umd.edu/papers_for_stories/crlite_oakland17.pdf#page=2 https://obj.umiacs.umd.edu/papers_for_stories/crlite_oakland...