News for hackers. Stuff that matters.

A comment on Safari will no longer trust certs valid for more than 13 months. Parent comment

Re:Safari will no longer trust certs valid for more than 13 ... by jsjddbbwj on Sunday February 23, 2020 @09:15PM (#22401090)
Sorry if this sounds dumb but this is a non sequitur for me. How does the for-profit web benefit from being able to revoke certificates? And why does revocation not work in practice? I thought all major browsers check their own lists to see if certs are revoked
[ Parent | on HN ]
Re:Safari will no longer trust certs valid for more than 13 ... by hoistbypetard on Monday February 24, 2020 @12:35AM (#22401914)
This paper:

https://cseweb.ucsd.edu/~schulman/docs/imc15-revocation.pdf

is slightly dated but gives a very good rundown of how revocation checks fail in practice along with different attempts to improve them.

[ Parent | on HN ]