News for hackers. Stuff that matters.

A comment on Distrusting StartSSL. Parent comment

Re:Distrusting StartSSL by rentzsch on Saturday April 12, 2014 @07:01PM (#7579519)
I think this is Langley's post tptacek is referencing: https://www.imperialviolet.org/2012/02/05/crlsets.html
[ Parent | on HN ]
Re:Distrusting StartSSL by tptacek on Saturday April 12, 2014 @07:08PM (#7579535)
Yup. So soft-fail revocation checks are like a seat-belt that snaps when you crash. Even though it works 99% of the time, it's worthless because it only works when you don't need it.
[ Parent | on HN ]