Hacker News new | ask | show | jobs
by azet 3866 days ago
Short story? No. Adam Langely has extensively written about the subject and difficulties at Google and in Chrome. In chronological order:

https://www.imperialviolet.org/2011/03/18/revocation.html

https://www.imperialviolet.org/2012/02/05/crlsets.html

https://www.imperialviolet.org/2014/04/19/revchecking.html

https://www.imperialviolet.org/2014/04/29/revocationagain.ht...

There hasn't been a lot of progress there but Certificate Transparency is of course a new player that might change how revocation works for different systems as well.