Hacker News new | ask | show | jobs
by ctz 2048 days ago
OCSP which fails open combines pointlessness with terrible privacy. It's why Mozilla is moving to CRLite for privacy-friendly revocation.