Confirmed users, Administrators
5,526
edits
CA:ImprovingRevocation: Difference between revisions
Jump to navigation
Jump to search
→Preload Revocations of Intermediate CA Certificates
| Line 115: | Line 115: | ||
* Dependencies: | * Dependencies: | ||
** This will require a bootstrapping effort where we ask all CAs to provide us with a comprehensive list previous relevant revocations. | ** This will require a bootstrapping effort where we ask all CAs to provide us with a comprehensive list previous relevant revocations. | ||
** Will require a notification mechanism for CAs to inform us of which certs to add to the revocation list. | |||
** In the short term, we will (probably) respond to the revocation notification by issuing a browser security update that contains the updated list of revoked certificates. In the long term, we may have a lighter-weight mechanism for updating the browser with updated revocation information, similar to Google's CRLSet mechanism. | ** In the short term, we will (probably) respond to the revocation notification by issuing a browser security update that contains the updated list of revoked certificates. In the long term, we may have a lighter-weight mechanism for updating the browser with updated revocation information, similar to Google's CRLSet mechanism. | ||