[hdgvhicv]

Revoking doesn’t really work.

https://garantir.io/certificate-revocation-challenges-and-be...

[jzl]

Stale news. Mozilla introduced a new solution for certificate revocation that solves nearly all the problems with old methods. While it hasn't really taken off outside of Firefox, that's mostly because Google and Apple haven't embraced it because they are too busy trying to shorten certificate life unnecessarily.

https://hacks.mozilla.org/2025/08/crlite-fast-private-and-co...

[hdgvhicv]

> While it hasn't really taken off outside of Firefox

Thus doesn’t really work. Sadly.

[zx8080]

What is the reason that they are shortening it?

[naturalmovement]

Revocation doesn't work because a cabal of arrogant Googlenos and friends decided it's too hard to fix so we won't do it at all.

The last browser where revocation worked properly is Internet Fucking Explorer.