A unique per certificate CRL might work in theory. Theory is not the same as pra... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		dambi0 on July 23, 2024 \| parent \| context \| favorite \| on: Intent to end OCSP service A unique per certificate CRL might work in theory. Theory is not the same as practice

mcpherrinm on July 23, 2024 [–]

Per-certificate CRLs are possible, though have about the same privacy problems as OCSP (without any of the possible advantages like OCSP pinning)

dambi0 on July 23, 2024 | [–]

Internal / private certificate distribution monitoring, but yes privacy beyond that.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact