LWN.net Logo

Advertisement

Linux Plumbers Conference

Get Stuff Done - For active developers in Linux graphics, kernel, libraries, and more

Advertise here

Not logged in

Log in now

Create an account

Subscribe to LWN

Recent Features

Interview: Kristen Carlson Accardi

LWN.net Weekly Edition for July 24, 2008

Tracing: no shortage of options

Interview: Wind River's John Bruggeman

LWN.net Weekly Edition for July 17, 2008

Printable page
Weekly edition Kernel Security Distributions Search
Archives Calendar Subscribe Write for LWN LWN.net FAQ
Rackspace.com

Extended Validation certificates and cross-site scripting

Extended Validation certificates and cross-site scripting

Posted Mar 13, 2008 11:01 UTC (Thu) by cortana (subscriber, #24596)
In reply to: Extended Validation certificates and cross-site scripting by grahammm
Parent article: Extended Validation certificates and cross-site scripting 

AFAIK, no browsers bother to consult CRLs unless the user spends a lot of time configuring a
CRL for each embedded CA certificate that the browser ships with. Making the whole X.509 PKI
fairly useless in practice.

(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds
Powered by Rackspace Managed Hosting.