Dave Levin

CRLite: A Scalable System for Pushing All TLS Revocations to All Browsers

2017

Currently, no major browser fully checks for TLS/SSL certificate revocations. This is largely due to the fact that the deployed mechanisms for disseminating revocations (CRLs, OCSP, OCSP Stapling, CRLSet, and OneCRL) are each either incomplete, …