Record · corpus.blog/posts/01a08787-934e-70dc-b659-ce04dec0e4f9

The End-to-End Design of CRLite

insufficient.coffee · published 9 January 2020

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at insufficient.coffee Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 23
Words captured: 1,529

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://blog.mozilla.org/security/2020/01/09/crlite-part-2-end-to-end-design/

blog.mozilla.org

Introducing CRLite: All of the Web PKI’s revocations, compressed Read at the source ↗

insufficient.coffee

https://wiki.mozilla.org/SecurityEngineering/Certificate_Verification

wiki.mozilla.org

https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/

mozilla.org

https://www.certificate-transparency.org/

certificate-transparency.org

https://insufficient.coffee/content/2020/01/figure1-information-flow.png

insufficient.coffee

https://insufficient.coffee/content/2020/01/figure2-filter-process.png

insufficient.coffee

https://en.wikipedia.org/wiki/Bloom_filter

en.wikipedia.org

https://insufficient.coffee/content/2020/01/figure3-filter-structure.png

insufficient.coffee

https://insufficient.coffee/content/2020/01/figure4-certificate-identifier.png

insufficient.coffee

https://obj.umiacs.umd.edu/papers_for_stories/crlite_oakland17.pdf

obj.umiacs.umd.edu

https://blog.mozilla.org/security/2013/07/29/ocsp-stapling-in-firefox/

blog.mozilla.org

https://wiki.mozilla.org/Security/CryptoEngineering/Intermediate_Preloading

wiki.mozilla.org

https://wiki.mozilla.org/Firefox/RemoteSettings

wiki.mozilla.org

https://github.com/mozilla/crlite/wiki

github.com

https://letsencrypt.org/

letsencrypt.org

https://insufficient.coffee/content/2020/01/figure5-enrolled-certificates.png

insufficient.coffee

https://censys.io/certificates?q=tags.raw%3A+%22unexpired%22+AND+tags.raw%3A+%22leaf%22+AND+validation.nss.valid%3A+true+AND+parsed.extensions.crl_distribution_points%3A+*

censys.io

https://redis.io/

redis.io

https://insufficient.coffee/content/2020/01/figure6-filter-sizes.png

insufficient.coffee

https://insufficient.coffee/content/2020/01/figure7-generation-times.png

insufficient.coffee

https://gist.github.com/5e2f7ba93094469059f6de7b9851ea86

gist.github.com

https://telemetry.mozilla.org/

telemetry.mozilla.org