4 ms·
If you have short validity times for certificates it also means you have shorter CRL.
by ozim 1y ago
If you have short validity times for certificates it also means you have shorter CRL.
- crote 1y agoNot by definition. The main issue is mass revocation events: the CRL is still going to initially contain up to 100% of certs currently active, and the number of active certs won't meaningfully change. It'll rapidly shrink over time as certs expire, but you still have to deal with that initial massive set.