Firefox has deployed CRLite, a revolutionary certificate revocation checking system that provides comprehensive coverage of all revoked certificates while maintaining user privacy. Unlike traditional OCSP methods that leak browsing activity, CRLite downloads compact encodings of revocation data locally, updating every 12 hours.
•6m read time• From hacks.mozilla.org
Table of contents
Better privacy and performanceBandwidth requirements of CRLiteState-of-the-art blocklist technologyFuture improvementsAbout John SchanckSort: