4 ms·
The CRL part is according to the standard RFC 5280, Section 8 (Security Considerations): "CAs SHOULD NOT include URIs that specify https, ldaps, or similar sc
by dlgeek 11y ago
The CRL part is according to the standard
RFC 5280, Section 8 (Security Considerations):
"CAs SHOULD NOT include URIs that specify https, ldaps, or similar schemes in extensions."
(https://tools.ietf.org/html/rfc5280 https://tools.ietf.org/html/rfc5280, page 103)
- DanWaterworth 11y agoPeople having obscure knowledge never ceases to impress me. (It's page 104 though ;P )
- lucb1e 11y agoI knew that as well because I was equally surprised that the revocation lists are over HTTP and looked this up, only I did this a few years ago. Not very obscure in my opinion.