On Tue, 13 May 2008 21:29:53 +0200, Vincent Bernat wrote: > - It seems that firefox does not handle CRL unless manually imported, > correct? This means that in most cases already issued certificates > are still vulnerable even revoked. A quick look seems to show that > most software do not handle CRL at all.
Yes, x509 is fundamentally broken in the first place. -- Sam Morris http://robots.org.uk/ PGP key id 1024D/5EA01078 3412 EA18 1277 354B 991B C869 B219 7FDB 5EA0 1078 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]