home.social

#crl — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #crl, aggregated by home.social.

  1. I totally missed the memo that #letsencrypt disabled #OCSP:

    letsencrypt.org/2024/12/05/end

    And I see that there has been a #cabforum ballot making OCSP optional with only one issuer opposing:

    cabforum.org/2023/07/14/ballot

    A terrible Idea. And to make it worst, LE is distributing their #CRL over #cloudflare just as they did with their OCSP endpoints.

  2. Let's Encrypt 把 CRL 位置加到憑證裡面了

    在「Adding CRL URLs to certificates」這邊看到的公告,把 CRL 位置加到憑證裡面了: On March 12, 2025, Let’s Encrypt will start including CRL (Certificate Revocation List) URLs in certificates we issue, in addition to the OCSP URLs we already include. This is part of our previously announced changes to deprecate support for OCSP. CRLs and OCSP are two di…

    blog.gslin.org/archives/2025/0

    #authority #ca #certificate #crl #letsencrypt #ocsp #revoke #root #security

  3. Flight: #RYR37LV
    ICAO code: #4D2242
    Callsign: #RYANAIR
    Operator: Ryanair
    Country: 🇮🇪
    From: #RVN to #CRL
    Speed: 480 kmh
    Altitude: 3551 m
    Distance: 7.4 km
    Angle ∆: 25.6°
    Direction ->: SSW
    Track:
    tinyurl.com/247pgzly
    History:
    radarbox.com/data/mode-s/4D2242
    Seen: 17x

  4. Flight: #RYR32RQ
    Registration: EI-EFN
    ICAO code: #4CA769
    Callsign: #RYANAIR
    Operator: Ryanair
    Type: BOEING 737-8AS
    Country: 🇮🇪
    From: #GOT to #CRL
    Speed: 593 kmh
    Altitude: 4267 m
    Distance: 2.3 km
    Angle ∆: 62.2°
    Direction ->: SSW
    Track:
    tinyurl.com/2yvfyeyd
    History:
    radarbox.com/data/mode-s/4CA769
    flightradar24.com/data/aircraf
    Photos:
    jetphotos.com/photo/keyword/EI
    Seen: 21x

  5. OCSP всё?

    Google УЦ Let’s Encrypt предупредил , что намерен «как можно скорее» прекратить поддержку протокола проверки статуса TLS-сертификата Online Certificate Status Protocol (OCSP) и впредь поддерживать только Certificate Revocation Lists (CRLs).

    habr.com/ru/articles/832170/

    #TLS #PKI #CRL #OCSP #CA/Browser_Forum

  6. Not the first one talking about it, but yesterday #LetsEncrypt announced to end the #OCSP service - a proposed standard to check the revocation status of #TLS certificates. The service is terminated in favor of certificate revocation lists (#CRL). The latter one was taught during my university degree in #cybersecurity as the recommended solution - yet adoption was sparse back 2 years ago.

    My take on this is that in practice few entities, services and software will be affected. The one's who will be affected are probably those with lesser-known and/or slightly exotic setups. Happy to be proven wrong by people who are more familiar with the matter than I am.

    Read up on the announcement of Let's Encrypt.

  7. Let's Encrypt transitions revocation program from OCSP to CRL.

    Why? Browsers have also switched browser-side checks (back) to CRL, after 10 years trying OCSP. It's all about privacy and performance.

    Until recently, your browser had to request data from the CA (eg DigiCert, Sectigo), which means they can know your sites and browsing/device habits. CRL solves this.

    letsencrypt.org/2022/09/07/new

    via letsencrypt.org/2024/07/23/rep

  8. Let's Encrypt 想要停掉 OCSP 服務

    看到 Let's Encrypt 貼出來的文章,想要停掉 OCSP 服務:「Intent to End OCSP Service」,而打算以 CRLs 為主。

    OCSP 是拿來驗證 certificate 是否有效的機制,由 CA 提供服務讓瀏覽器查詢,但這會

    blog.gslin.org/archives/2024/0

    #Computer #Murmuring #Network #Privacy #Security #Service #WWW #authority #ca #cache #certificate #crl #crls #letsencrypt #ocsp #performance #privacy #scalability #scale #security #stapling

  9. Flight: #RYR50ZC
    ICAO code: #4CA769
    Registration: EI-EFN
    Type: BOEING 737-800
    Operator: Ryanair
    Direction: 91° (East)

    Route:
    🛫: Dublin - #DUB
    🛬: Brussels - #CRL

    Track:
    globe.adsb.fi/?icao=4ca769
    adsb.lol/?icao=4ca769

    #adsb #B738