News for hackers. Stuff that matters.
Re:Ca-certificates: removal of SPI CA by ams6110 on Wednesday November 25, 2015 @06:24PM (#10630445)
Does certificate revocation work better these days?

http://news.netcraft.com/archives/2013/05/13/how-certificate...

Re:Ca-certificates: removal of SPI CA by azet on Wednesday November 25, 2015 @08:10PM (#10630782)
Short story? No. Adam Langely has extensively written about the subject and difficulties at Google and in Chrome. In chronological order:

https://www.imperialviolet.org/2011/03/18/revocation.html

https://www.imperialviolet.org/2012/02/05/crlsets.html

https://www.imperialviolet.org/2014/04/19/revchecking.html

https://www.imperialviolet.org/2014/04/29/revocationagain.ht...

There hasn't been a lot of progress there but Certificate Transparency is of course a new player that might change how revocation works for different systems as well.