Record · corpus.blog/posts/01a07df5-2eb4-7161-ae13-8a977a840960

Post-OCSP certificate revocation in the Web PKI

Seirdy · published 25 September 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at seirdy.one Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 60
Words captured: 6,119

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://cabforum.org/2023/07/14/ballot-sc-063-v4-make-ocsp-optional-require-crls-and-incentivize-automation/

cabforum.org

Intent to End OCSP Service Read at the source ↗

letsencrypt.org

https://letsencrypt.org/docs/glossary/

letsencrypt.org

https://carrickbartle.com/certificates.html

carrickbartle.com

https://carrickbartle.com/

carrickbartle.com

https://xkcd.com/1309

xkcd.com

https://explainxkcd.com/wiki/index.php/2501:_Average_Familiarity

explainxkcd.com

https://www.rfc-editor.org/rfc/rfc5280.html

rfc-editor.org

https://blog.mozilla.org/security/2015/11/23/improving-revocation-ocsp-must-staple-and-short-lived-certificates/

blog.mozilla.org

https://mastodon.social/@computerist

mastodon.social

https://scotthelme.co.uk/ocsp-expect-staple/

scotthelme.co.uk

https://scotthelme.co.uk/

scotthelme.co.uk

https://docs.google.com/document/d/1aISglJIIwglcOAhqNfK-2vtQl-_dWAapc-VLDh-9-BE/edit

docs.google.com

https://issues.chromium.org/issues/41230705

issues.chromium.org

https://blog.hboeck.de/archives/886-The-Problem-with-OCSP-Stapling-and-Must-Staple-and-why-Certificate-Revocation-is-still-broken.html

blog.hboeck.de

https://github.com/mozilla/server-side-tls/issues/283

github.com

https://github.com/tomwassenberg/certbot-ocsp-fetcher

github.com

A New Life for Certificate Revocation Lists Read at the source ↗

letsencrypt.org

https://www.chromium.org/Home/chromium-security/crlsets/

chromium.org

https://www.imperialviolet.org/2012/02/05/crlsets.html

imperialviolet.org

https://www.imperialviolet.org/

imperialviolet.org

https://www.imperialviolet.org/2014/04/29/revocationagain.html

imperialviolet.org

https://doi.org/10.1145/2815675.2815685

doi.org

https://www.chromium.org/Home/chromium-security/quarterly-updates/

chromium.org

https://blog.mozilla.org/security/2020/01/09/crlite-part-2-end-to-end-design/

blog.mozilla.org

https://devstreaming-cdn.apple.com/videos/wwdc/2017/701jvytnoey2yc7222/701/701_hd_your_apps_and_evolving_network_security_standards.mp4

devstreaming-cdn.apple.com

https://opensource.apple.com/source/Security/

opensource.apple.com

https://developer.apple.com/documentation/security/policies

developer.apple.com

https://forums.developer.apple.com/forums/thread/706629

forums.developer.apple.com

https://www.ndss-symposium.org/ndss-paper/lets-revoke-scalable-global-certificate-revocation/

ndss-symposium.org

https://go-acme.github.io/lego/

go-acme.github.io

https://letsencrypt.org/2024/04/25/guide-to-integrating-ari-into-existing-acme-clients

letsencrypt.org

https://github.com/beautifulentropy

github.com

https://www.rfc-editor.org/rfc/rfc8739.html

rfc-editor.org

https://blog.cloudflare.com/announcing-keyless-ssl-all-the-benefits-of-cloudflare-without-having-to-turn-over-your-private-ssl-keys/

blog.cloudflare.com

https://www.rfc-editor.org/rfc/rfc9345.html

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc9115.html

rfc-editor.org

https://yaronf.svbtle.com/certificate-delegation-with-acme-and-star-certificates

yaronf.svbtle.com

https://yaronf.svbtle.com/

yaronf.svbtle.com

https://wicg.github.io/webpackage/draft-yasskin-http-origin-signed-responses.html

wicg.github.io

Firefox hardening progress Read at the source ↗

seirdy.one

https://www.agwa.name/

agwa.name

https://erincandescent.net/

erincandescent.net

https://w3techs.com/technologies/history_overview/ssl_certificate

w3techs.com

https://community.letsencrypt.org/t/what-will-happen-to-must-staple/222397/7

community.letsencrypt.org

https://aarongable.com/

aarongable.com

https://lobste.rs/s/k4uuth/intent_end_ocsp_service

lobste.rs

https://mcpherrin.ca/ Read at the source ↗

mcpherrin.ca

https://news.ycombinator.com/item?id=41048161

news.ycombinator.com

https://en.wikipedia.org/wiki/Automatic_Certificate_Management_Environment

en.wikipedia.org

https://cabforum.org/working-groups/server/baseline-requirements/documents/

cabforum.org

https://docs.google.com/document/d/180T6cDSWPy54Rb5d6R4zN7MuLEMShaZ4IRLQgdPqE98/mobilebasic

docs.google.com

https://docs.google.com/document/d/1C0i0pOaI84gNccGzREPOrr5kMfpYkUEr87cBMZ09q_4/mobilebasic

docs.google.com

https://www.ccadb.org/resources

ccadb.org

https://bugzilla.mozilla.org/show_bug.cgi?id=1281469

bugzilla.mozilla.org

On a more selective Google Read at the source ↗

seirdy.one

https://wiki.debian.org/LTS/Extended

wiki.debian.org

https://web.archive.org/web/20240902154502if_/https://www.etsi.org/deliver/etsi_en/319400_319499/31941201/01.04.04_60/en_31941201v010404p.pdf

web.archive.org

https://blog.cloudflare.com/keyless-delegation/

blog.cloudflare.com

https://nvd.nist.gov/vuln/detail/CVE-2023-38198

nvd.nist.gov