News for hackers. Stuff that matters.

A comment on Intent to End OCSP Service. Parent comment

Re:Intent to End OCSP Service by warhorse10_9 on Tuesday July 23, 2024 @08:44PM (#41052566)
Modern crls are partitioned so this really isn’t a problem you will run into.
[ Parent | on HN ]
Re:Intent to End OCSP Service by remram on Wednesday July 24, 2024 @10:10AM (#41057304)
Does that not recreate the privacy problem then, since the CRL server can see which CRL partition we download and when?

Should we expect CRL stapling?

[ Parent | on HN ]
Re:Intent to End OCSP Service by mst on Wednesday July 24, 2024 @11:31AM (#41058098)
I think one would expect a partition to cover a lot of certificates for its size (or in the case of a compromise all certificates mapped to that partition) so I don't think you end up with nearly so meaningful a problem.
[ Parent | on HN ]