Heartbleed OpenSSL fallout: "The struggle to fix problems caused by the Heartbleed bug may slow browsing speeds" i.imgur.com/O8JmG.gif
1
1
Replying to @diodesign
@diodesign Well it will if it causes browser vendors to make browsers check the CRLs by default like they bloody well should have all along.

Apr 15, 2014 ยท 2:48 PM UTC

2
Replying to @dsilverstone
@dsilverstone re: CRL checks. What do you make of this, by a Chrome engineer: imperialviolet.org/2012/02/0โ€ฆ
1
@diodesign It reminds me why I dislike the PKI surrounding SSL certificates and why I love the PGP WoT :-(
Replying to @dsilverstone
@dsilverstone "On this basis, we're currently planning on disabling online revocation checks in a future version of Chrome."
1
more replies