aeris22’s avataraeris22’s Twitter Archive—№ 38,581

      1. …in reply to @R1Rail
        @R1Rail @GossiTheDog In case of malware, certificate owner never asks for revocation :P
    1. …in reply to @aeris22
      @R1Rail @GossiTheDog And revocation process is NOT verify by browser. That’s an explanation of the 90d validity for @letsencrypt .
  1. …in reply to @aeris22
    @R1Rail @GossiTheDog CRL are not checked by browsers. OCSP not deployed or broken. No way to notify quickly and surely users…