Hacker News new | ask | show | jobs
by reaperhulk 1996 days ago
A good example of how rapidly a CRL can grow in size is Apple's WWDRCA CRL. Current size: 224MB despite only containing revocations back to Feb 2020. http://developer.apple.com/certificationauthority/wwdrca.crl
2 comments

I chuckled a bit when I clicked on your link and got a browser warning that crl cannot be downloaded securely over http.
What in the world? Why are there millions of revoked certificates? What is creating all of these?