HTTPS Certificate Revocation is broken, and it’s time for some new tools

[Chiefcrowe]

https://arstechnica.com/security/20...ion-is-broken-and-its-time-for-some-new-tools

 

[PeterRoss]

Quite shocking to hear that most browsers are cutting corners on revocation and even more shocking that Chrome doesn't check them at all. Kind of concerned for security reasons. I guess even more reasons to be extra careful when browsing. Thanks for sharing it. Great article!

 

[Jaskalas]

A bit of a side note, it's thanks to your link that I discovered Let's Encrypt and finally got to freely, and successfully, deploy HTTPS on my Apache servers. Certificate Authorities have always been a road block before.

 

[Bardock]

Security landscape is going to become much more volatile. We have taken it for granted.