Hacker News new | ask | show | jobs
by papaf 4436 days ago
Theres one thing that I do not understand - why not download the full revocation list?
2 comments
pencilcode 4436 days ago
Potentially too much data to download, imagine, all revoked certificates in the entire internet.
link
sp332 4436 days ago
You would have to crawl all OCSP providers on the internet to generate the list.
link