Re:No, don't enable revocation checking
by colons on Sunday April 20, 2014 @03:53AM
(#7616176)
This argument only holds if the attacker controls every internet connection you use. If you're on a portable device or you're otherwise connecting through various networks, only a subset of which are compromised, revocations are still useful.
[ Parent
| on HN ]
Re:No, don't enable revocation checking
by captainmuon on Sunday April 20, 2014 @04:31AM
(#7616248)
Exactly. If I'm on my trusted network at home and receive a big revocation list, and a few weeks later go to, say, Egypt, and someone tries to MITM me there with a stolen certificate, then it would show up as invalid.