Hacker News new | ask | show | jobs
by bawolff 701 days ago
CT isn't used for revocation. CRLs aren't really a thing in practise. Refusing to accept expired certs is important for other reasons but won't save you from a reused ECDSA nonce.