3 ms·

Also, cert revocation just barely works, in some browsers, with EV certificates, after old CRLs expire over a course of months: http://news.netcraft.com/archiv

• pixl97 13y ago
  Time for every browser to change that behavior.
• btown 13y ago
  Is there a tutorial (for multiple browsers/platforms) for browser users to manually initiate downloading and processing of the latest CRL? Is this even exposed by most modern browsers, i.e. as part of the "clear cache" functionality? If so, I'd want to tell my [self/family/friends/coworkers] to do this in the coming weeks to minimize the amount of time they might happen to send private information to a MITM attacking, say, an e-commerce site. Specifically, I'd be most interested for such a walkthrough for Google Chrome on OS X, which most people I know use.
  • gsnedders 13y ago
    Chrome doesn't check revocations by default. See "Check for server certificate revocation" in settings, which has for a while been disabled by default.