The information in https://wiki.mozilla.org/CA/Revocation_Checking_in_Firefox is largely up to date. CRLite is still in development.
Dana On Mon, Aug 12, 2024 at 2:55 AM bruce lee <[email protected]> wrote: > As of today, how is the revocation status being checked? > > 在2024年2月6日星期二 UTC+8 01:47:54<[email protected]> 写道： > >> Incidentally, the section on revocation checking for extended validation >> certificates is out of date - I'm working on getting that fixed >> (intermediates are no longer required to have OCSP information for EV, so >> Firefox skips checking for it). >> >> On Mon, Feb 5, 2024 at 9:44 AM John Schanck <[email protected]> wrote: >> >>> The information in >>> https://wiki.mozilla.org/CA/Revocation_Checking_in_Firefox is largely >>> up to date. Although we've moved beyond "preparing to test" CRLite and >>> we are now actively evaluating its performance with a subset of our >>> release population. >>> >>> John >>> >>> On Mon, Feb 5, 2024 at 8:49 AM bruce lee <[email protected]> wrote: >>> > >>> > Dear Firefox developers, >>> > >>> > I would like to understand how Firefox checks for certificate >>> revocation status when validating SSL certificates. Could you please >>> explain what method Firefox uses to verify whether a certificate has been >>> revoked? Proper revocation checking is an important security practice, so I >>> would appreciate any details you can provide on how this works in Firefox. >>> > >>> > Thank you in advance for your assistance. Please let me know if you >>> need any clarification from me. >>> > >>> > -- >>> > You received this message because you are subscribed to the Google >>> Groups "[email protected]" group. >>> > To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> > To view this discussion on the web visit >>> https://groups.google.com/a/mozilla.org/d/msgid/dev-platform/aec15cfd-c9e9-4acf-8a4d-e31fbe4aea90n%40mozilla.org >>> . >>> >>> -- >>> You received this message because you are subscribed to the Google >>> Groups "[email protected]" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> >> To view this discussion on the web visit >>> https://groups.google.com/a/mozilla.org/d/msgid/dev-platform/CAFgAd7H7_Nmg%3D9NppBdg3eNHK13X7j57k7ZGp0JtbHaUxBefdQ%40mail.gmail.com >>> . >>> >> -- You received this message because you are subscribed to the Google Groups "[email protected]" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/mozilla.org/d/msgid/dev-platform/CAHP1u2jhLaO51aWFWcOxzU81BH_%2BwRme0QN_-mYYUuCeJLd4KA%40mail.gmail.com.
