@networkexception@chaos.social
Post #2603613
2026-04-12 00:53 UTC
@pl@mastodon.social might be intended https://chromium.googlesource.com/chromium/src/+/HEAD/docs/security/faq.md#what_s-the-story-with-certificate-revocation
Replies (1)
-
@networkexception@chaos.social 2026-04-12 00:56
@pl@mastodon.social though certificate transparency also wasn't honored until somewhat recently and that was definitely not intended https://github.com/GrapheneOS/Vanadium/issues/779 I can speak on behalf on ungoogled-chromium, where not doing any outgoing requests is a deliberate design choice. So it's down to fetching CRLs out of band (for example with OS support) or praying for short lived certificates