aeris22’s avataraeris22’s Twitter Archive—№ 38,580

    1. …in reply to @R1Rail
      @R1Rail @GossiTheDog In case of malware, certificate owner never asks for revocation :P
  1. …in reply to @aeris22
    @R1Rail @GossiTheDog And revocation process is NOT verify by browser. That’s an explanation of the 90d validity for @letsencrypt .
    1. …in reply to @aeris22
      @R1Rail @GossiTheDog CRL are not checked by browsers. OCSP not deployed or broken. No way to notify quickly and surely users…