Re:No, don't enable revocation checking
by mpyne on Sunday April 20, 2014 @02:25PM
(#7617882)
> but the answer cannot be even in the short-run to let a browser vendor tell us which revocations are worth knowing about.
So you trust the browser vendor to ship you executable native code but you don't trust the browser vendor to apply reasonably decent criteria for the top x% most-needed cert revocations on the Internet?
So you trust the browser vendor to ship you executable native code but you don't trust the browser vendor to apply reasonably decent criteria for the top x% most-needed cert revocations on the Internet?