+1. Thank you for making both OCSP Watch <https://sslmate.com/labs/ocsp_watch/> and now CRL Watch <https://sslmate.com/labs/crl_watch/>available to the community, Andrew!
On Mon, Feb 20, 2023 at 1:44 PM Ben Wilson <[email protected]> wrote: > Thanks for doing this, Andrew. It is very helpful. > Sincerely yours, > Ben > > On Mon, Feb 20, 2023 at 6:48 AM Andrew Ayer <[email protected]> wrote: > >> Now that several root programs require disclosure of CRLs in the CCADB, >> I've begun regularly crawling disclosed CRLs to look for problems. >> >> The list of identified problems can be found here: >> https://sslmate.com/labs/crl_watch/ >> >> CRL Watch is currently tracking problems with 29 distinct issuers. >> The most common problem is CAs disclosing the wrong URL in the CCADB. >> Remember, the disclosed CRL should be for certificates issued by >> the CA, not the CRL that covers the CA certificate. >> >> CAs should examine https://sslmate.com/labs/crl_watch/ and address >> any problems. >> >> Regards, >> Andrew >> >> -- >> You received this message because you are subscribed to the Google Groups >> "CCADB Public" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/a/ccadb.org/d/msgid/public/20230220084828.a2f70e6fa617a4551451f6b5%40andrewayer.name >> . >> > -- > You received this message because you are subscribed to the Google Groups > "CCADB Public" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/ccadb.org/d/msgid/public/CA%2B1gtaYKg_R_Dv6NXpu%2Bd%2BPLCOtLpvrofg6npy-je4Xvo6JHxw%40mail.gmail.com > <https://groups.google.com/a/ccadb.org/d/msgid/public/CA%2B1gtaYKg_R_Dv6NXpu%2Bd%2BPLCOtLpvrofg6npy-je4Xvo6JHxw%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "CCADB Public" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/ccadb.org/d/msgid/public/CADEW5O_DCBpx3EoTtKrDsFOP51F6WN5b8TAuKQMXkJUnh%2B8WcA%40mail.gmail.com.
