No, don't enable revocation checking

Re:No, don't enable revocation checking by papaf on Sunday April 20, 2014 @02:46AM (#7616089)

Theres one thing that I do not understand - why not download the full revocation list?

[ Parent | on HN ]

Re:No, don't enable revocation checking by pencilcode on Sunday April 20, 2014 @06:57AM (#7616450)

Potentially too much data to download, imagine, all revoked certificates in the entire internet.

[ Parent | on HN ]

Re:No, don't enable revocation checking by sp332 on Sunday April 20, 2014 @07:59AM (#7616543)

You would have to crawl all OCSP providers on the internet to generate the list.

[ Parent | on HN ]