News for hackers. Stuff that matters.

A comment on Heartbleed is about to get worse, and it will slow the Internet to a crawl.

Re:Heartbleed is about to get worse, and it will slow the In... by mballantyne on Tuesday April 15, 2014 @11:53PM (#7596012)
Do CRLs even work? My understanding is that the only browser that hard-fails to load a page if OCSP is blocked is Chrome for certs in CRLSets. Everyone else is vulnerable to MITM if access to the CRL / OCSP servers is blocked.

I would love to be wrong. Does anyone know if anything has changed for the better since 2011?

http://blog.spiderlabs.com/2011/04/certificate-revocation-be... http://dev.chromium.org/Home/chromium-security/crlsets https://www.imperialviolet.org/2011/03/18/revocation.html

[ Parent | on HN ]

There are no comments on this comment yet.