Certificate Revocation is a process through which we make sure that those certificates that are not considered valid are not used by relying parties.

learn more… | top users | synonyms

3
votes
2answers
73 views

How are CRLsets more secure?

Google Chrome doesn't do typical CRL/OSCP checks, instead it depends on CRLsets. In simple terms, Google scoops up the CRLs from most CAs, trims them down and delivers the CRLset to the browser via ...
1
vote
0answers
21 views

Specify port for cRLDistributionPoint?

cRLDistributionPoints is OID 2.5.29.31. Here's what one looks like under Gutmann's dumpasn1: SEQUENCE { OBJECT IDENTIFIER cRLDistributionPoints (2 5 29 31) OCTET STRING, encapsulates { ...
1
vote
0answers
49 views

Cetificate Pinning. How do we handle the situation where a website is visited for the first time?

What I essentially mean to ask is, how is the scenario where a user who visits a website for the first time (the certificate for the website is not pinned in the browser) handled ? Additionally how is ...