4 ms·
The largest Let's Encrypt CRL right now is 254 KB. Most are smaller. We might want to partition into smaller shards again to hit a bit smaller size than that in
by mcpherrinm 2y ago
The largest Let's Encrypt CRL right now is 254 KB. Most are smaller. We might want to partition into smaller shards again to hit a bit smaller size than that in the future.
Shorter certificate lifetimes will also reduce CRL sizes.
A lot of traffic comes from browsers, or TLS stacks integrated with their host operating system, which we expect will use compressed push-based methods like Mozilla's CRLite to receive more efficient data structures as well.
One thing this announcement allows us to do is motivate us to start working on making CRL mechanisms more efficient.