As we had predicted ("Trend #9: SSL Gets Hit in the Crossfire) SSL infrastructure is drawing a lot of attention this year. Google researcher Adam Langley says that Google is planning on disabling online revocation checks, or Certificate Revocation Lists (CRL), in a future version of Chrome. What's a CRL? When a browser connects to an HTTPS site it receives signed certificates which allow it to verify that it's really connecting to the domain that it should be connecting to. In those certificates are pointers to services, run by the Certificate Authorities (CAs) that issued the certificate, which allow the...
↧