Re:How I got a valid SSL certificate for my ISP's main domain
by fpgaminer on Saturday March 21, 2015 @12:56PM
(#9243302)
Seems like a bloom filter may work to deal with the large database of revoked certificates.
[ Parent
| on HN ]
Re:How I got a valid SSL certificate for my ISP's main domain
by AnthonyMouse on Saturday March 21, 2015 @01:16PM
(#9243393)
Bloom filters have false positives. Then you need some way to verify that a hit isn't a false positive, and whatever method is used for that will have the same availability problem in verifying a hit in the bloom filter as it would have in obtaining the revocation that way to begin with.