logoalt Hacker News

jkingsman • yesterday at 7:04 PM • 2 replies • view on HN

Oh boy. I wonder how many other companies that have previously been lax about validating that cert revocation is handled correctly by their devices are going to validate the eMudrha cert revocation and discover that they are not, in fact, handling revocation correctly. Yikes.


Replies

pseudohadamard • today at 3:28 AM

Cert checking and random apps is hit-and-miss. Revocation checking is mostly nonexistent, because it's hard to do and doesn't work in most cases.

therein • yesterday at 10:54 PM

At least it will be better moving forward, one can hope.