News for hackers. Stuff that matters.

A comment on Six Dumbest Ideas in Computer Security. Parent comment

Re:Six Dumbest Ideas in Computer Security by freeone3000 on Monday July 15, 2024 @11:43AM (#40968893)
Certs should be checked against a CRL and CT for revocation, and expired certs should never be accepted, for this reason among others.
[ Parent | on HN ]
Re:Six Dumbest Ideas in Computer Security by bawolff on Monday July 15, 2024 @08:36PM (#40972700)
CT isn't used for revocation. CRLs aren't really a thing in practise. Refusing to accept expired certs is important for other reasons but won't save you from a reused ECDSA nonce.
[ Parent | on HN ]