On Thu, Dec 19, 2024 at 5:24 PM Rich Salz <[email protected]> wrote:
>
>
>
> On Thu, Dec 19, 2024, 6:59 PM Matt Palmer <[email protected]> wrote:
>>
>> Oh, I don't know... ransomware has been far more effective at improving
>> DR practices than several decades of education was.
>
>
> An important difference is that I am a customer of the CA, and often paying 
> for a service. I'm not paying you to DoS me.
>
> In the venues where I mainly work( the ietf) we often say that revocation 
> does not work on the web. Which part of the Web PKI needs to become more 
> responsive? My hunch is that it is not the CAs.

Revocation doesn't work for non-browser clients. Thanks to OneCRL it
does work decently well for browsers.

>
> --
> You received this message because you are subscribed to the Google Groups 
> "[email protected]" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to [email protected].
> To view this discussion visit 
> https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CAFH29trsULk%3D%2BTjyMkZBkr716vkXomrq0mOD0_Tpb8TMLF7-AQ%40mail.gmail.com.



--
Astra mortemque praestare gradatim

-- 
You received this message because you are subscribed to the Google Groups 
"[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CACsn0cnefGbOh_7mBnzvqsSADio0Pw3-y3XHrnATybF49T7wCg%40mail.gmail.com.

Reply via email to