Hacker News new | ask | show | jobs
by enneff 4436 days ago
Soft fail doesn't work at all. CRLset works for the certificates that it covers (some 25k of them, btw).

Which approach is worse?