3 ms·
How many people are going to check that box under "Advanced Settings"? 0.1%?
by fastest963 13y ago
How many people are going to check that box under "Advanced Settings"? 0.1%?
- scrollaway 13y agoUnlikely to be that high. The 0.1% that may dig in those advanced settings is likely the same 0.1% that disabled the thing back when it was enabled by default. CRLs are worthless.
- fastest963 13y agoWorthless except when your cert key is stolen and you want to revoke the old one?
- sp332 13y agoWhat good is it to revoke one, if it still works because no one checked the revocation list?
- fastest963 13y agoThat's the whole point of me posting this...
- iancarroll 13y agoHow are they worthless?
- msherry 13y agoThey're worthless because clearly no one is using them. They may theoretically be useful, but it doesn't matter if they're never put into practice.
- iancarroll 13y agoDo you mean nobody on the CA side or the end user side? CA's suspend certificates all the time - instant e the scam site had theirs pulled a few weeks ago...
- nullc 13y agoBeyond being seldom used, they also leak usage information.
- dfc 13y agoIf you are leaking usage information with ocsp/crl checks you are also spewing out information via DNS requests.
- snogglethorpe 13y agoStill, having that setting there means you can easily tell people to turn it on...