Original post on hachyderm.io

Today I published an update on the #Canonical supported #upki project, which brings browser-grade Public Key Infrastructure to Linux through the efficient #CRLite data format, with the core revocation engine now functional and available to test!

Beyond current progress, this post explores […]

后 OCSP 时代，浏览器如何应对证书吊销新挑战 2023 年 8 月，CA/Browser Forum 通过了一项投票——不再强制要求 Let’s Encrypt 等公开信任的 CA 设立 OCSP Server 2024 年 7 月，Let’s Encrypt 发布博客，披露其计划关闭 OCSP Server 同年 12 月，Let’s Encrypt 发布其关闭 OCSP Server 的时间计划表，大致情况如下： 2025 年 1 月

后 OCSP 时代，浏览器如何应对证书吊销新挑战 2023 年 8 月，CA/Browser Forum 通过了一项投票——不再强制要求 Let’s Encrypt 等公开信任的 CA 设立 OCSP Server...

#SSL #Firefox #Web #PKI #OCSP #CRLSets #CRLite

Origin | Interest | Match

后 OCSP 时代，浏览器如何应对证书吊销新挑战 2023 年 8 月，CA/Browser Forum 通过了一项投票——不再强制要求 Let’s Encrypt 等公开信任的 CA 设立 OCSP Server 2024 年 7 月，Let’s Encrypt 发布博客，披露其计划关闭 OCSP Server 同年 12 月，Let’s Encrypt 发布其关闭 OCSP Server 的时间计划表，大致情况如下： 2025 年 1 月

#SSL #Firefox #Web #PKI #OCSP #CRLSets #CRLite

Origin | Interest | Match

To overcome OCSP's flaws, alternatives like Mozilla's CRLite (a compressed revocation list) and widespread adoption of short-lived certificates are gaining traction. These aim for more robust & private certificate validation. #CRLite 3/6

Firefox just made web browsing faster, more private, and more secure. A new on-device system ends a major trade-off in internet security. #CRLite #Privacy

Link in the comments.

Firefox CRLite boosts security and privacy without compromise Mozilla released Firefox 142 yesterday, bringing with it a new feature called CRLite. This is able to efficiently handle certificate revocations securely and privately, all offline.

Mozilla released Firefox 142 yesterday, bringing with it a new feature called CRLite. This is able to efficiently handle certificate revocations securely and privately, all offline. #Mozilla #Firefox #CRLite