News for hackers. Stuff that matters.

A comment on No, don't enable revocation checking. Parent comment

Re:No, don't enable revocation checking by enneff on Sunday April 20, 2014 @12:47PM (#7617451)
Soft fail doesn't work at all. CRLset works for the certificates that it covers (some 25k of them, btw).

Which approach is worse?

[ Parent | on HN ]

There are no comments on this comment yet.