On 05/10/16 14:09, Peter Gutmann wrote: > Rob Stradling <rob.stradl...@comodo.com> writes: > >> Today we have revoked (via CRL and OCSP) all 3 of the cross-certificates that >> we'd issued to WoSign: > > This allows us to examine the modern Internet variant of an old philosophical > question, "If a certificate is revoked in the web PKI and no one checks the > CRL, does it make a sound?".
Easy. It doesn't make a sound. Unrevoked certificates don't make sounds either. -- Rob Stradling Senior Research & Development Scientist COMODO - Creating Trust Online _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
