☕️ Insufficient Coffee

Archive of posts regarding crlite

CRLite: Speeding Up Secure Browsing

Published 2020-01-21

CRLite pushes bulk certificate revocation information to Firefox users, reducing the need to actively query such information one by one. Additionally this new technology eliminates the privacy leak that individual queries can bring, and does so for the whole Web, not just special parts of it.

[read more]

The End-to-End Design of CRLite

Published 2020-01-09

CRLite is a technology to efficiently compress revocation information for the whole Web PKI into a format easily delivered to Web users. It addresses the performance and privacy pitfalls of the Online Certificate Status Protocol (OCSP) while avoiding a need for some administrative decisions on the relative value of one... [read more]