Re: Proposal: prohibit issuance of new certificates with known-compromised keys, and for related purposes

On Thu, Apr 09, 2020 at 04:55:51PM +0100, Nick Lamb via dev-security-policy wrote: > Right-sizing of Bloom filters is an issue, but you only need to get > ballpark accuracy. If we genuinely aren't sure if there will be a > thousand or a billion RSA private keys compromised next year then yup >

Re: Proposal: prohibit issuance of new certificates with known-compromised keys, and for related purposes

On Mon, 6 Apr 2020 12:56:02 -0400 Ryan Sleevi via dev-security-policy wrote: > It's not as easy as saying "use a bloom filter" if a bloom filter > takes X amount of time to generate. I've spent a bunch of time up to my neck in bloom filters (they're one of the key components of 4store, a GPL'd