2 ms·
Wait. What. Let's Encrypt CRLs are only available to browser vendors? So you can't even do a CRL check in an SMTP server if you wanted to? > Our new CRL URLs w
by eqvinox 2y ago
Wait. What. Let's Encrypt CRLs are only available to browser vendors? So you can't even do a CRL check in an SMTP server if you wanted to?
> Our new CRL URLs will be disclosed only in CCADB, so that the Apple and Mozilla root programs can consume them without exposing them to potentially large download traffic from the rest of the internet at large.
https://letsencrypt.org/2022/09/07/new-life-for-crls.html https://letsencrypt.org/2022/09/07/new-life-for-crls.html
- mcpherrinm 2y agoThat’ll change with OCSP depreciation, as certificates are required to contain one or the other of OCSP or CRLs.